Add current_user_can( 'manage_shop_settings' ) to edd_settings_sanitize_misc()
Only dismiss notices if user is logged in
Don't run edd_discount_field() if not on checkout
Don't send admin notice if the payment ID is not a payment post type
Add nonce to paypal gateway
Don't contiue with straight_to_gateway if a valid download ID is not given