update README to list GitHub as requiring credentials_in_request_body, as per issue #22