New ROS mangle ruleset, other refinements.

* Connection tracking disable upon join in api/update.php.
* DSCP based mangle rules added in api/firewall.php.
* ROS ctwug_global_settings refinements.
* ROS ctwug_global_settings disables reboot privilege from ctwug user group.