fix typo in README.md

/api/policies/passport.js should be authenticated.js