add instructions for authenticating controllers
clean up README
add TOC link for admin interface restricting to README