Add note in README about using inSecure: false

I spent 30 minutes wondering what I was doing wrong with yar during development. Turned out I needed to set inSecure to false. This was not immediately visible to me - till I dug into the code. 

This README update should save others the same pain.