Use SHA2 hash for api keys.
Update README.