If you have ftp access, you should also have ssh access. If you can connect with ssh, you can access the config object in mongodb.
Permissions for a custom page
Is it possible to setup permissions for a custom static page?
I have limited it so users must be logged in to see the link on my header, but if they save this as a bookmark or remember the URL, that can bypass requiring to login
I would like to set user must be logged in to see the content on page
I don't think so. This is something to bring up on the plugin's Github page.