Settings route should not specify a role

Problem/Motivation

Because not all sites may have an "administrator" role, and if that role exists it may not be a user 1 equivalent role, admin users may not be able to use the settings form, and "administrator" users may not need that permission

Proposed resolution

Add a new permission to "Administer password eye" or use the "Administer users" permission instead of a role requirement for the rout.