updated README, finished security tweaks