Add a .htaccess file (with commented out options to prevent server errors) and update the README with better information

webtools/doctor/.htaccess

@@ -0,0 +1,22 @@
+# Note that uncommenting these options will generate an internal server error
+# if the global Apache configuration file doesn't explicitly enable their use
+# for this directory via the appropriate AllowOverride statement.
+
+# Uncomment this to enable CGI scripts in this directory in lieu of
+# changing this in the global Apache configuration file.
+# Requires "AllowOverride Options" to be enabled for this directory.
+#Options +ExecCGI
+#AddHandler cgi-script cgi
+
+# Uncomment this to execute doctor.cgi automatically when the user requests
+# the directory (i.e. http://yoursite/doctor/).
+# Requires "AllowOverride Indexes" to be enabled for this directory.
+#DirectoryIndex doctor.cgi
+
+# IMPORTANT! Uncomment this to restrict access to doctor.conf.  This prevents
+# users from accessing the configuration file, which may contain sensitive CVS
+# authentication info (i.e. username, password).
+# Requires "AllowOverride Limit" to be enabled for this directory.
+#<Files doctor.conf>
+#  Deny from all
+#</Files>

webtools/doctor/README

@@ -7,12 +7,13 @@ can get via CPAN:
 
 perl -MCPAN -e"install Template, AppConfig, File::Temp, Text::Diff, Email::Valid, and MIME::Entity"
 
-Finally, put the doctor directory into your web server's cgi-bin directory
+Then configure your web server to serve Doctor files correctly.  See the
+.htaccess file for an explanation of the configuration options, but note that
+you should add the options to the global Apache configuration file if you have
+access to it since the global file is much more performant than .htaccess.
+
+Finally, put the doctor/ directory into your web server's cgi-bin/ directory
 (or another location where you can run CGI scripts) and browse to doctor.cgi.
 
-You may also want to edit the templates in the templates/ sub-directory
-to refer to your own site instead of mozilla.org's.
-
-Note that doctor.conf may contain a CVS write password you don't want anyone
-to know.  The .htaccess file restricts access to that file for Apache
-if this feature is enabled in .htaccess files.  Check and make sure!
+You may want to edit the templates in the templates/ subdirectory to refer
+to your own website instead of the mozilla.org website.