Update readme with warning about secure cookies