Update README

Include information about whitelisting certain url patterns