update readme
change allow option to bypass
give specific development dep versions