Simplify deployment configuration for mws and ivs.

This is mostly just a small cleanup to deployment.

- Each webapp is now served off of the same "virtualhost", but we use a URL prefix to distinguish things.
- Update README for completeness.
- Make sharing of cookie secret explicit between ivs and mws in config.