Add a 'findOne' method to AppModel to filter options
Add a 'findOne' method to RoleModel to filter options
Update permitted options in SettingsModel
Change UserModel to better filter options

furthers #2653
- update permitted options in 'findOne' method
- add edit method to filter options there