Fix some privacy issues

app/settings/__init__.py

@@ -2,4 +2,16 @@ from flask import Blueprint
 
 
 bp = Blueprint('settings', __name__)
+
+
+@bp.before_request
+@login_required
+def before_request():
+    '''
+    Ensures that the routes in this package can only be visited by users that
+    are logged in.
+    '''
+    pass
+
+
 from . import routes