Card #259 security fix for saving own user settings