update docs to reflect security best practices

Thanks to Stefano di Paola and Dmitry Savintsev for letting us know
about a potential security vulnerability in one of our examples. See
http://blog.mindedsecurity.com/2009/05/http-parameter-pollution-new-web-attack.html
for more specifics.