Update README.md

Fixed post authorization redirect path. Also added 'scope' string from config to the getOauthUrl call so the correct permissions are requested.