add admin script to destroy a running app+data container pair
be less verbose during build to avoid truncating wercker log

Avoid message on app.wercker.com:

    The logs have been truncated (max log size: 1500000 bytes).
add table of contents to readme
prevent user from changing password

This really has no effect on normal behavior of the container
since we deny password-based login anyway.
optionally enable duosecurity for multi-factor auth

The default is to **not use** duo.
You must edit your local configuration in order to enable duo.
See the readme, global.conf, and login_duo.conf for details.