Session cookie test makes no sense when proxied https://www.virtualmin.com/node/25313
use words file to validate passwords https://www.virtualmin.com/node/25300
permissions fix
Make editable state explicit