Document that img_auth.php must be used to protect files

Although WikiGuard properly protects files, this protection can be evaded completely if the wiki is not using img_auth.php. The extension should document this clearly, and maybe even give a warning when this is not configured (if possible).