Merge pull request #19 from solarce/master

fixes for push script and content
Tweak push script to not append a bunch of info to revision.txt.
Default session and CSRF cookies to be secure.
Remove vhost mention in docs, it implies something that's not right.

With the vhost paragraph, it looks like vhosts are an alternative to
per-user permissions, when in fact they are an integral mechanism in
permissions, which, as far as I can tell, are per-user always.
Merge remote-tracking branch 'mozilla/master'