Added safety breaker / added better tooling in the configuration page.

Added safety breaker / added better tooling in the configuration page.

A new feature has been added to the plugin: safety breaker. When the server serves traffic without the correct HTTP Header, it will trip (if the safety breaker is enabled) and disable the plugin. This is intended to catch misconfiguration that could result in people gaining access to the server.
Note that when the breaker trip, it will be visible in the configuration page.

Also, the configuration page now shows up which user is currently logged in with the header that was last saved, this should help with debugging.
Alternatively, if the javascript wasn't injected in the index.html page, it will display a corresponding message.