Security clarification added to javascript README.md.