some more doc tweaks
- more precise autotools dependencies
- note more config locations in README
- fix appengine README relative path
- note about public key when running appspot against a foreign facilitator
- note about secure storage for reg-email.pass
- note about plain vs end-to-end encrypted HTTP registrations, and when to use each
- copy-then-edit apache config, rather than edit-then-copy