Corrected path in security note in README (wrong project, heh)