update README with new way to toggle authentication