improved security in script extension, disabling rest api when default password has not been changed
Merge pull request #368 from jdeolive/script_sec

improving security of script extension