Update readme on authentication headers