Elaborate on OSSEC alert instructions

Addresses #788 
Need to make edits to install.md to account for new document
cool if it works now then why are we stil recommending not to enable 2fa on that account? Was there any other reason? I think the app specific password part was the only blocker for that and if that is resolved think we should be recommending it.