Respond with 403 when not using SSL; 426 is inappropriate
Fix whitespace
API POST create admin/features
Validate Feature#ui_type