[Drone 2.0] {slug}/settings/ visible to un-authenticated users

In the new Drone 2.0 UI, un-authenticated users can view the project settings for a public repo by simply adding ‘/settings/’ after the {slug} in the URL.

For example: Drone CI

In the previous version, the UI would redirect for authentication.

Note: the settings can not be changed.