improve security; add README