Update README
Change admin key to be sent to server in headers

- Change browser to send admin key in headers
- Change server to read admin key from headers
  instead of request parameters
- Change browser not to send admin key in
  request parameters
Ajax loader gif