update readme to mention vanish auth