Updated README with explanation of the xss-enabled branch