update readme
oops, almost had a security hole.

wrote a require_admin wrapper for conciseness