README.md in authtrail-0.1.1 vs README.md in authtrail-0.1.2

@@ -14,11 +14,11 @@
 
 And run:
 
 ```sh
 rails generate authtrail:install
-rake db:migrate
+rails db:migrate
 ```
 
 ## How It Works
 
 A `LoginActivity` record is created every time a user tries to login. You can then use this information to detect suspicious behavior. Data includes:
@@ -33,42 +33,102 @@
 - `ip` - IP address
 - `user_agent` and `referrer` - from browser
 - `city`, `region`, and `country` - from IP
 - `created_at` - time of event
 
-IP geocoding is performed in a background job so it doesn’t slow down web requests. You can disable it entirely with:
-
-```ruby
-AuthTrail.geocode = false
-```
-
 ## Features
 
 Exclude certain attempts from tracking - useful if you run acceptance tests
 
 ```ruby
-AuthTrail.exclude_method = proc do |info|
+AuthTrail.exclude_method = lambda do |info|
   info[:identity] == "[e-mail]"
 end
 ```
 
-Write data somewhere other than the `login_activities` table.
+Write data somewhere other than the `login_activities` table
 
 ```ruby
-AuthTrail.track_method = proc do |info|
+AuthTrail.track_method = lambda do |info|
   # code
 end
 ```
 
+Use a custom identity method [master]
+
+```ruby
+AuthTrail.identity_method = lambda do |request, opts, user|
+  if user
+    user.email
+  else
+    request.params.dig(opts[:scope], :email)
+  end
+end
+```
+
+Associate login activity with your user model
+
+```ruby
+class User < ApplicationRecord
+  has_many :login_activities, as: :user # use :user no matter what your model name
+end
+```
+
+The `LoginActivity` model uses a [polymorphic association](http://guides.rubyonrails.org/association_basics.html#polymorphic-associations) so it can be associated with different user models.
+
+## Geocoding
+
+IP geocoding is performed in a background job so it doesn’t slow down web requests. You can disable it entirely with:
+
+```ruby
+AuthTrail.geocode = false
+```
+
 Set job queue for geocoding
 
 ```ruby
 AuthTrail::GeocodeJob.queue_as :low
 ```
 
+### Geocoding Performance
+
+To avoid calls to a remote API, download the [GeoLite2 City database](https://dev.maxmind.com/geoip/geoip2/geolite2/) and configure Geocoder to use it.
+
+Add this line to your application’s Gemfile:
+
+```ruby
+gem 'maxminddb'
+```
+
+And create an initializer at `config/initializers/geocoder.rb` with:
+
+```ruby
+Geocoder.configure(
+  ip_lookup: :geoip2,
+  geoip2: {
+    file: Rails.root.join("lib", "GeoLite2-City.mmdb")
+  }
+)
+```
+
+## Data Protection
+
+Protect the privacy of your users by encrypting fields that contain personal information, such as `identity` and `ip`. [attr_encrypted](https://github.com/attr-encrypted/attr_encrypted) is great for this.
+
+```ruby
+class LoginActivity < ApplicationRecord
+  attr_encrypted :identity, ...
+  attr_encrypted :ip, ...
+end
+```
+
+You should also make it clear that you collect this information in your privacy policy.
+
 ## Other Notes
 
 We recommend using this in addition to Devise’s `Lockable` module and [Rack::Attack](https://github.com/kickstarter/rack-attack).
+
+Check out [Hardening Devise](https://github.com/ankane/shorts/blob/master/Hardening-Devise.md) and [Secure Rails](https://github.com/ankane/secure_rails) for more best practices.
 
 Works with Rails 5+
 
 ## History