updated install instructions

instructions for installation from source
Why would you want to give the whole directory to the web server user? This is neither needed nor desired but a security mess.