Security fix to README