update readme for clarity & better security