Harden

Hightened security for nginx and php5-fpm. 

* App pool php5-fpm changes root to /srv/$userName so it can't execute anything located outside of that structure. 
* Nginx doesn't forward .php-scripts from folders where users can upload their own content.
* Nginx handles but doesn't log access to robots.txt