update README with auth refs