Update README

Add a note about authorization