update README (user privilege)