update readme with security instructions, update #49