factor out direct call of save_auth_settings from role dropdowns (prep for making saves more granular, i.e., don't resave all settings, just the one that's being changed. we do this to avoid concurrency issues with multiple admin users).