Update README.md

Explains how to enable appsecret_proof