Update Readme

[2shrestha22]

Some users may ignore the warning message because they already get false sense of security. It would be nice if you add how .env file being handled and it is not same as .env we use in server side application. Everyone may not know how assets works. There are couple of issue regarding .env file being visible.

I think all these problem will be sorted by adding a noticeable warning stating that. .env file is added as an asset and it will be shipped with the app and anyone can see it easily by extracting the apk.