change readme to `npm update` from `npm upgrade` (fix #5)