add security section.

includes deployment considerations and authentication basics. to be
completed.