updated README.md, added example of XSS vuln