Call reload settings on handler init. This prevents an exception if we update status msg too quickly.
If someone puts http:// in the address bar, connect over https unless we're debugging.
Don't show prompt if user doesn't have request_perms permission. Fixes #164.