Filter permitted options in BaseModel very strictly
Add 'add' method to AppModel to filter options
Add 'add' method to AppSettingModel to filter options
Update PostModel methods to sanitize options w/o delegating to BaseModel
Add 'add' method to PermissionModel to filter options hash
Add 'add' method to RoleModel (heh) to filter options hash
Filter destroyAll method in SessionModel
Filter options in SettingsModel methods

furthers #2653
- add 'add', 'findOne' methods to SettingsModel to filter options
- filter options in 'read' method before passing to model's findOne method
- filter options in 'edit' method
Add 'add' method to TagModel to filter options
Alter UserModel to filter options

furthers #2653
- add 'findOne' method to filter options hash
- filter options and attributes in 'add' method
- perform save in 'add' method rather than delegating to BaseModel