modify docs in readme, library code

added a little bit to heelloAction.send() so that we inject proper auth into each request