Update README.md

Little note about security and the API key.