updated readme with security info