Fix final security flaw and update README