pass secret & token to base64 callback
give better examples in README
version bump