introduce a restricted editor capability:
- map CRW_CAPABILITY to CRW_CAP_CONFIRMED
- new options tab in settings page features the possibility
  to choose editor capabilities for each role
- on install CRW_CAP_CONFIRMED is aligned to moderate_comments capability,
  CRW_CAP_UNCONFIRMED to subscriber role