updated validation section of readme with correct call url and app user