Added security checks, updated README.md to reflect that

fix: update gunicorn path to find app in backend folder

Initial clean production-ready commit