updated README
tighten up security of FPM and Nginx status pages
Merge branch 'master' into 1.6