Updated README and
1. we no longer require the security framework any more
2. client application does not need to add libxml2 header search path