Add doc about enabling SSL and basic auth

This addresses part of issue #432.
It may be good to change the `-out` value to be `self-signed-marathon.pem` since `pem` are usually the extensions received from CA's.  This would make it easier to distinguish the different files later in the process.