Documentation: fix typo

Bundlder => Bundler
Config/Apache: misc fixes (Proxy, Headers, Logs)

Several fixes for the sample Apache config rapidconnect.conf
* Exclude Shibboleth-SP URLs from the ProxyPass directive
* Remove erroneous /idp from ProxyPass target
* Add ShibUseHeaders On as needed by unicorn behind HTTP proxy
* Rename log files from groups_* to rapid_* (copy-edit?)
Config/SP: add SAML2 OID mapping for O and OU

Provide also a SAML2 OID mapping for O and OU (they've been so far
mapped only with SAML1 URN attribute names).
Mail: use settings.hostname in notification emails
Views: change remaining AAF Fuse to RapidConnect

Change remaining references to AAF Fuse to AAF RapidConnect.
Cookie: use secure cookie in production deployment

Pass "secure: true" to Rack options in production environment to use
:secure session cookies.

Correspondingly, update Apache configuration so that Apache tells Racks
that the request has been forwarded from an SSL connection - add a
header:
   X-Forwarded-SSL: on
Cookie: use secure cookie only in production env

Make the use of secure cookie conditional on being in production
environment - as per comments in #11.
Merge pull request #11 from University-of-Auckland/develop-mic-fixes

Misc fixes for RapidConnect
Switch erb to escape HTML by default using Erubis

Guard against potential XSS and other nasties by users of Rapid Connect
Merge pull request #12 from ausaccessfed/feature/extra-xss-protection

Escape all variables inserted in HTML by default