Closes #58 admin users can read all settings