fixes for settings controller to only check the $module permission (no need for an extra permission per module)
update to sitemap_xml.php default view file to properly include values into the $used array