Expand examples/auth_client.js a little.

Now it uses the new verify_response method to make sure it can
trust the response it gets from the server.
Couple more updates for README.