Updated README
Added CSRF Protection to login, /api/reset functions
Added auto highlighting of API key when clicked