vtigercron.php patch for some servers

PHP_SAPI is no 100% secure way to find out if the script is started from shell.
Added a $_SERVER['SHELL'] check