removed the entries in the configuration file, concerning the security features. Because they do not exist anymore.
Made a reference in the README to the apache server, running in front of Play.