Misc fixes for RapidConnect

Hi Shaun, Bradley,

I've started deploying RapidConnect for Tuakiri: here's a collection of fixes to contribute back:
* Documentation: fix minor typo
* Config/Apache: misc fixes (Proxy, Headers, Logs)
** so that the Apache config actually works with RapidConnect
* Config/SP: add SAML2 OID mapping for O and OU
** just for completeness
* Mail: use settings.hostname in notification emails
** So that the emails do not point hard-coded to rapid.aaf.edu.au
* Views: change remaining AAF Fuse to RapidConnect
** Mostly on admin-facing pages but one also on a user facing page
* Cookie: use secure cookie in production deployment
** I found the cookie is by default set as insecure so would be also transmitted over http

This will be problematic in :development space which is often run locally over non SSL.

Instead the following may be a better option

```ruby
    use Rack::Session::Redis, expire_in: 3600, secure: Sinatra::Base.production?
```

If you could test and update that would be great.