Update init

Fix regex\defaults in routes, replace static Markdown autoloader class to closure.
No, they're not. Without the === that will pass with 1, "no", "no thanks", "off", array(1) and a whole host of other stuff. Like I said in my comment the API Browser is a potential security risk so I don't see any reason why we shouldn't force people to explicitly say TRUE if they want it.