Set the max request body size in the CONFIG_OPTIONS file
removed ref to configuring resolve.conf which is not needed with current install
Merge pull request #231 from dolanjs/file-upload-size

Set the max request body size in the CONFIG_OPTIONS file. Fixes #223.
added line to ensure that .google_authenticator file permissions are set to 400
Merge pull request #233 from dolanjs/fix-ubuntu-config-doc

Remove obsolete documentation from ubuntu_config.md, fixes #216
Merge pull request #234 from dolanjs/fix-google-auth-permissions

Ensure .google_authenticator file permissions are set. Fixes #201
Changed refs to source/journalist website to source/document interface, and Source server to App server
Merge pull request #232 from dolanjs/fix-workstation-names

Fixed confusing code names, fixes #170
changed default answer for the wait for app server installation question in the ossec install script
Merge pull request #236 from dolanjs/fix-default-answer

Changed default answer for question in install scripts
Related it issue #107
Adds custom error pages all pointing to the /notfound page so the defined headers are sent for error pages
Adds Pragma, Expires, X-Content-Type, X-download, X-Content-Security policy, Content-Security-Policy to apache configs
Removes X-XSS-Protection header from apache configs
changed `no-sniff` to `nosniff` thanks @Taipo issue #107
re-added x-xss-protection header
grouped the headers together
fixed caps

fixed caps
copied same comments from source.site to document.site
removed duplicate header
added pacing and comment
replace flawed commonprefix check with relpath

Adds a test (same PoC described in the audit)
tighten scope in store.verify
Merge pull request #237 from garrettr/feature/194/fix-imprecise-store-verify

Fixes #194
Merge pull request #199 from dolanjs/apache-headers-fix

Apache config headers and error page fixes. Closes #107, fixes #192
moved file/message saving logic to store.py for easier testing