366a8381c4
An empty `backend` form field now correctly falls back to the default. A non-empty field submitted by a non-admin user is rejected with a 403 error, preventing potential tampering or issues arising from stale sessions after role changes.