make editors lists take effect:
- update editors lists on the server
- exchange 'edit_posts' capability with a custom 'edit_crossword'
  assigned to subscriber and admin roles, but no other
- consistent permission tests for all Ajax requests
Wordpress settings page, part two: ReviewController
- data are loaded from server
- no actions yet