Some users may not have service privileges so that creates an
endless redirect loop.  This indicates that there's not much
use of the current ACL in the wild or it is not used in a way
to decouple captive portal administraion and operation.

This reverts commit e4e8e26f.

This one is used more frequently and also expected when one
clicks on a link that says `Certificates'.

fix https://github.com/opnsense/core/commit/b79592582e0d1fb86343867468f09fee8ca3c8af#commitcomment-10707586

oops... broke the header links, fixed it so it should work for both the status page and the default header.

* Do not patronise the user about advanced settings.  The user should
  know what she's doing.  ;)

* Hide the tabs page by moving it from .php to .inc -- web server acces
  to this file extensions is forbidden.  Tabs do not have authentication
  and that's bad if left untreated...