Several security hardening fixes.
* Don't use create_function.
* Ensure all functions hooked into admin_init are cap-checked.  Props to Mickael at Sucuri for responsible disclosure.

Conflicts:
	wpsc-admin/admin.php
	wpsc-admin/init.php
	wpsc-includes/wpsc-theme-engine-bootstrap.php