mostly security updates and an error fix in the menu

turned off display errors for ZWS
root username+password now SHA-256 encrypted
set default encrypted root username and password to 'rootuser' and 'rootpass'
added ZABLE.config.password_rules to all validations of new passwords
when creating new user in userman.js, there is no alert about changing the new users password
in ZCMS.php, when building a menu and a page is not flagged as visible, the range for the next menu is set to the range of the identified page