Update README to include note about sandboxed apps

Closes #3