Updated readme to include script-nonce settings