Update Changelog

Author: turegjorup

CHANGELOG.md

@@ -5,6 +5,9 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html)
 
+## [Unreleased]
+- Set default for ADMIN_OIDC_ALLOW_HTTP to false in README to prevent unsafe settings in production
+
 ## [4.0.1] - 2025-01-16
 - Fix doctrine/orm require