Fix a security issue with paths.
Thank @sohelzerdoumi for reporting it. see #137, closes #140, #141
Also add a bit more of documentation
Bump to version 1.8.1