Security improvements and bug fix

Added a xmledit permission to disable the manual xml editor
Added an option to force xmlrpc on ssl (need a reverse proxy ssl)
Added a check for empty values when initializing configuration file (#634)