4.0.2

Security Update

• Fix vulnerability which allowed logged in users to update some site options in certain configurations. Props to @sybrew for responsibly disclosing this issue.