updated README.md with correct default permissions