check activation and make activation impossible by default

apps/user_webfinger/activate.php

@@ -1,11 +1,18 @@
 <?php
+
+// comment out this line:
+	die("This feature is still experimental. Please comment out this line in the code, then try again\n");
+//
+
+
+
 $ownCloudBaseUri = substr($_SERVER['REQUEST_URI'],0, -(strlen('/apps/user_webfinger/activate.php')));
 $thisAppDir = __DIR__;
 $appsDir = dirname($thisAppDir);
 $ownCloudDir = dirname($appsDir);
 try{
 	symlink($thisAppDir, $ownCloudDir.'/.well-known');
-	echo "Webfinger should now work.";
+	echo "Webfinger should now work.\n";
 } catch(Exception $e) {
-	echo "Please create a file called '.well-known in the ownCloud root, give the web server user permission to change it, and retry;";
+	echo "Please create a file called '.well-known in the ownCloud root, give the web server user permission to change it, and retry.\n";
 }

apps/user_webfinger/host-meta.php

@@ -1,5 +1,9 @@
 <?php
-header("Access-Control-Allow-Origin: *");
+if($_SERVER['SCRIPT_NAME'] == '/.well-known/host-meta.php') {
+	header("Access-Control-Allow-Origin: *");
+} else {
+	header('Please visit /apps/user_webfinger/activate.php first');
+}
 header("Content-Type: application/xml+xrd");
 echo "<";
 ?>