Update README.md

Add info to make it explicit that the module doesn't deny access to controllers. Useful for sails and passport newbies.