appserver: set PHP's expose_php to Off

This disabled the superfluous X-Powered-By header that PHP emits on very
single response, as well as silly URLs that end with e.g.
?=PHPE9568F34-D428-11d2-A769-00AA001ACF42 that turn PHP respond its logo
instead.

Change-Id: I6d5ea3306ff56cf752f96e8794666bb64ff46a30
appserver: Convert CRLF to LF in php.ini

Change-Id: I9f572ab18a80998c42bc03d509534da71b0da92c