update README; only authToken login will be accepted