Add app files

Normally I'd gitignore node_modules, but I'm going to try committing it, see how it goes.
Add security analysis to README