Added XSS/Crumb info to README