Fix readme.
README, fix obvious XSS bug.