esc_html on read request parameters
added missing current_user_can checks
nice warning message styling
issue #12