FS#3632 - Adding websites with remote API is broken in 3.0.5.4p3 release.
Missed to commit one file for: FS#3634 - Add option to disable statistics for a website

- Added warning in the interface when a path for a shelluser is set that is outside of the website docroot.
- Added security settings feature to allow the root user of a server to control most aspects of whet the admin user of the controlpanel is allowed to do in system settings. This is especially useful for managed severs where the ispconfig admin user and the root user of the server are different persons.

additionally fixes this for client_update

- Added some cleanup code

this also fixes a problem with ignored vhost subdomains on validation

Fixed: reseller has_clients if limit_client is != 0, e.g. -1 or > 0. Thanks to Sergio for pointing out this issue.

- Make sure ISPConfig shows the correct error message (instad of an SQL error) when a website is renamed after an alias domain that still exists.
- It should be possible to create two websites with the same domain on the same server as long as the IP differs. I therefore changed the serverdomain index of the web_domain table to include the IP address.