Update JDBCConfig documentation to warn of security risks Backport to 2.6.x

Backport https://github.com/geoserver/geoserver/pull/737

Purely a documentation change.