Update README.md

- emphasize more on the necessity of adding hosts to the whitelist
- add v0.06 change (expose http headers)