Readme: make requirement for authenticating reverse proxy clearer