Update readme to make it more clear that you still need to redirect after logging in, closes #4