Updating Readme on how to ensure all URLs are private