create secure configuration guide for the web page

create a guide for locking down the application for production use. ideally this would include how to create 'accounts', how to assign those accounts 'roles', and how to configure the application to disallow use from users who don't have accounts or roles.