[README] fix --auth=client-key:client-secret