SECURITY: validate exchanged ephemeral keys

Fixes iSECs Finding #14
update Readme to reflect insecurity in versions < 0.2.1
bump version to 0.2.1
update srp_js in the example to use new repository and files