Update composer.json+readme, add crossdomain protection