Wired up options dropdown to actually prevent unauthorised query actions.
Made some tweaks to the save(as) auth