This patch fix security problem. It implemented hook_perm() and replaced 'administer site configuration' with 'administer taxotouch', and added all check_plain() is where it's needed.