updated readme, added config warning
filename protection