diff --git a/README.md b/README.md
index fbbabc1..f97079b 100644
--- a/README.md
+++ b/README.md
@@ -2,8 +2,9 @@
 This plugin adds Basic Authentication to a WordPress site.
 
 Note that this plugin requires sending your username and password with every
-request, and should only be used for development and testing. We strongly
-recommend using the [OAuth 1.0a][oauth] authentication handler for production.
+request, and should only be used over SSL-secured connections or for local
+development and testing. Without SSL we strongly recommend using the
+[OAuth 1.0a][oauth] authentication handler in production environments.
 
 ## Installing
 1. Download the plugin into your plugins directory
@@ -17,7 +18,7 @@ examples are listed below.
 ### cURL
 
 ```sh
-curl --user admin:password http://example.com/wp-json/
+curl --user admin:password https://example.com/wp-json/
 ```
 
 ### WP_Http
@@ -30,5 +31,17 @@ $args = array(
 );
 ```
 
+### [node-wpapi][]
+
+```js
+const WPAPI = require('./wpapi')
+const wp = new WPAPI({
+    endpoint: 'https://example.com/wp-json',
+    username: 'editor',
+    password: 'password'
+});
+```
+
 [oauth]: https://github.com/WP-API/OAuth1
 [RFC2617]: https://tools.ietf.org/html/rfc2617
+[node-wpapi]: http://wp-api.org/node-wpapi/