Switch to CBC mode for AES encryption
bump version, update readme