README, add authentication section