updated readme with security and best practice tool yasat (Yet Another
Stupid Audit Tool)