Doc updates.

Wrote a part about configuring a protected resouce event handler.
Updated the service documentation with information about HTTP 405 and
409 response codes that can now be emitted.