Clarify in docs risk of unsecured access to the web UI (SSL)

Recommend that admins setup SSL access to the web ui, especially if it's accessible via public network.