Updated readme. Other enhancements.

Also:
- Tornado does not run as root anymore (more secure).
- Used supervisord for both nginx and tornado on the host machine (uniform/easier control).
- Common setup scripts for dev, prod.