Fix #35 by sending the password to the client so POSTs provide complete config.
Allow SSL mail setting to be turned off once turned on.
Fix #36 by including status in POST when updating issue via comment.