Tidied up filesystem permissions

c-pod group now owns everything
Apache user now a member of the c-pod group
Made c-pod::setup recipe consistent with bin/setup_repo