Require session token for validation
Iframe readme updates