ensure security of the entire package

the commands after this one will ensure things are correct everywhere
else
add to webgroup / chown after hardening of security