Prevent AJP connector accepting REMOTE_USER

References #183.

The example connector configuration invalidly set tomcatAuthentication to false (which is what you normally want when being fronted by a Shibboleth SP hence the error). In this specific case only the VH IdP filters should be able to establish a value for REMOTE_USER.
Recommend Tomcat AJP binds to localhost only

References #183.

Per Tuakiri and AAF internal practice recommend that Tomcat AJP connectors only listen on 127.0.0.1 for connections from webserver.
Add documentation for VH ECP support.

References #183.

Outlines nature of ECP support and basic documentation required to configure support.
Fixed indentation on code examples

Mix of tabs and spaces and inconsistent indentation looked messy.
Merge pull request #185 from ausaccessfed/bugfix/#183-refine-documentation

Refine example documentation and add information about ECP.