Fix logic inn detecting if OpenVPN resync needed

Commit https://github.com/pfsense/pfsense/commit/f33dcc5c79c54af7daf91a81cfdd7f489e8cb67c reversed the logic sequence when testing if $resync_needed - the individual tests were changed from "==" to "!=" and so on, but the conjunction also need to be changed - "or" needs to be "and". I had noticed that VPNs on some gateway groups of mine didn't failover recently, but hadn't gone looking for the problem until now.
This might help bug #3243 - it will probably now make the OpenVPN resync on every interface/gateway change for the cases of CARP VIPs and VLANs mentioned in that bug report. At least that will be better than not resyncing at all.
Check for disabled OpenVPN instances in openvpn_resync_if_needed

It is much cleaner if we check first for disabled OpenVPN instances, before diving into all the other checks. Note, the final openvpn_resync() does call other routines that finally check if the instance is disabled, but there are so many checks here for various conditions to be met before calling openvpn_resync that it looks better (safer) to bail out early if the instance is disabled.
Fix display of pools in the LB status widget and on the LB Virtual Server status.
use (self) rather than any as the destination for the lockout rules
use (self) instead of any for web lockout
Now that doc.pfsense.org does https and redirects http to https, we may as well send the help links to the https destinations.
Replace pfSense with the rebrand
Remove this check, the value can be 0 here if the target is the first item in the array.
We do not use nor include newsyslog, so remove the cron job.
Remove newsyslog cron job on upgrade, if present.
Perform a much more accurate comparison between two certificates to determine if they are identical when checking their revocation status. Fixes #3237
Added OVH DynHOST in dynamic DNS services
Add upgrade code to change the DHCP next-server value to nextserver since it was renamed sometime in 2.1 but upgrade code didn't follow. Also shuffle the upgrade code blocks a bit since we need these on 2.1.x and nobody should be on 2.2 yet, so the impact should be minimal to renumber the one bit specific to 2.2.
Needs parens
added favicon to logged in pages
Merge pull request #818 from jdillard/master

added favicon to logged in pages
Remove redundant test for OpenVPN resync_needed
Fix 'Packet loss rate' and 'Bucket Size' range checking
Set default value to radius_protocol during upgrade, it should fix #3226
Allow special chars to be used on IPSec mobile login banner. Fixes #3247