Make Gallery configuration more secure

Currently, I find it impossible to change the technical configuration of Gallery without exposing the config page to any user who decides to legitimately check out my Gallery and running into the config.

I hope the method of configuring Gallery is changed in future releases so it's not vulnerable in this sense.