Small fixes

* CSRF protection in module menu
* Improve UI installer - required fields, install on check errors and
automatic URL definition