readme update auth section