update readme for auth tokens