add more security settings (allow_admin_panel, core_install_access_domains)
+ small fixes