update read me with auth_pass and auth_user