Add curl support to allow trigger script support webhook call
Update readme and add security section