Added note on preventing direct access to Kibana 3 via just browsing to the URL for the directory where it lives.