Add more sensible note about COINBASE_CALLBACK_URL in the readme