updated readme with form spam prevention, user permission levels, and some typos