readme, fixed auth bug