Hide Settings Tab if Author

Implements #3293. Currently, we don’t have a permission system on the
client side, so this relies on a hardcoded “author” string.
I think this is going to need to be a little more robust.  A User may have more than one role, in which case the collection will need to be iterated through to test for the the Author role.