improved README
return http status 401 (unauthorized) when key validation fails
merging tokit gitlab and github versions