set better defaults (sites-enabled/* is included in apache by default on most systems)

Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org>
fix possible xss-target

Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org>
Merge remote-tracking branch 'origin/0.9.31'