Improvements to API documentation.

* Added requirement to send header when POSTing config.xml (thanks jglick)
* Don't tell anyone with Overall/Read where JENKINS_HOME is located
* Add an alternative to viewing config.xml files on the server for non-admins