updated readme regarding secret tokens and keys