add best practices from http://crosbymichael.com/dockerfile-best-practices.html