optionally enable duosecurity for multi-factor auth

The default is to **not use** duo.
You must edit your local configuration in order to enable duo.
See the readme, global.conf, and login_duo.conf for details.
add admin script to destroy a running app+data container pair