updated README, moved new config args to site
updated changelog
Fixed security issue with sqlite db file being world readable
Update src/mod_auth_openid.cpp

fix build error: "APR_ARRAY_IDX" not declared which was caused by apr version < 1.3
fixed issue with str_replace causing segfault on empty string
fixed issue preventing valid authentication when session cookie wasn't being used
Merge pull request #37 from JiePan/master

fix build error in src/mod_auth_openid.cpp for 6 year old apr that is still used in RHEL/CentOS5 because they prefer to never update anything ever: "APR_ARRAY_IDX" not declared