FIX #3: CVE-2014-3926: XSS in <title> via "addr" parameter

This code is from 04adc9d3384f1efbb81f8f88a7d1d6871adf2e45
Merge branch 'CVE-2014-3926'
Suggest config file location change outside web root

Closes #4: CVE-2014-3928: Unsafe configuration file path/ACL
Merge branch 'CVE-2014-3928'
Suggest config file location change outside web root

Closes #5: CVE-2014-3929: Unsafe SSH keypairs path in default config
Merge branch 'CVE-2014-3929'
Merge branch 'master' of https://github.com/Cougar/lg into develop