Update README.md

Probably it is `verifytoken.ashx` but `default.aspx`.