Update readme with note about firefox and CSP