Elaborate on OSSEC alert instructions

Addresses #788 
Need to make edits to install.md to account for new document
I think it worth the complexity. We recommend/enforce 2fa for all of the other logins. Google has a good page to explain it all [1]. And should be something that all users should enable for all their gmail accounts.

[1] https://www.google.com/landing/2step/