docs: improve documentation

README.md

@@ -1,15 +1,13 @@
 # basic-auth-connect
 
-Connect's Basic Auth middleware in its own module. This module is considered deprecated. You should instead create your own middleware with [basic-auth](https://github.com/visionmedia/node-basic-auth).
+Connect's Basic Auth middleware in its own module. You should consider to create your own middleware with [basic-auth](https://github.com/visionmedia/node-basic-auth).
 
 ## API
 
 ```js
 var basicAuth = require('basic-auth-connect');
 ```
 
-Sorry, couldn't think of a more clever name.
-
 Simple username and password
 
 ```js
@@ -28,13 +26,17 @@ connect()
 
 Async callback verification, accepting `fn(err, user)`.
 
-```
+```js
 connect()
 .use(basicAuth(function(user, pass, fn){
   User.authenticate({ user: user, pass: pass }, fn);
 }))
 ```
 
+**Security Considerations**
+
+Important: When using the callback method, it is recommended to use a time-safe comparison function like [crypto.timingSafeEqual](https://nodejs.org/api/crypto.html#cryptotimingsafeequala-b) to prevent timing attacks.
+
 ## License
 
 [MIT](./LICENSE)