fixing security hole in detecting urls, updating README