change header to 'behavior' per api template

Signed-off-by: Sam Kleinman <samk@10gen.com>
minor updates to orient users and maybe limit page clicks

Signed-off-by: kay <kay.kim@10gen.com>
some tweaks
updateUser method missing pwd field and a tweak of security ref page
create a root user