Fix "force private" logic

[wxiaoguang]

When creating a repo, the "FORCE_PRIVATE" config option should be respected, readonly doesn't work for checkbox, so it should use disabled attribute.