Added a settings page, sorted out ACLs and added geotagging.  This is work towards #10, closes #9 and closes #4