secure scripts which should not be called directly (install/update stuff); avoid url-manipulation

Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org>
fix possible undefined variable if session timed out after login and re-login with another user

Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org>