Always set httponly attribute on cookies
Change the option for webconfig login autocomplete from opt-in to opt-out, also bump config version and write a function to keep the current status on upgrades
We need to allow subdirectories under /usr/local/pkg, here is the proper fix
Fix whitespaces and indent
Simplify logic, add some protection to user input parameters