readme and doc
fix a vulerability, add some readme