Update Security Rules to edit Settings ref #8

This fixes issue #8 where settings are not editable. Not so sure I have this right at all, but hopefully will save some time solving the issue.