template compiler: fixed handling php injection in default value: {$year}<?=date('Y')?>{/$}
skip crossite auth form screen if there is an only single domain
check if essence meta exists when showing add panel