update the README with new installation instructions

the only new instruction was creating a SECRET_TOKEN, but I had
forgotten to add "install MongoDB" to the list.