Fix servlet-security instructions. Add add-user instructions, remove arguments from server start. Fix README.html.