adde instructions to readme for the secure token