Aligning permissions and tar extraction logic to match default.rb

In my testing with nginx-based deployments, we kept having upload issues cropping up that I tracked down to this recipe. I changed out all the file permissions logic to match what you're doing in default.rb, and also went ahead and matched up the method of grabbing and extracting the wordpress release archive. I just finished testing and it works great now, so here's a pull request.