Update README.
Add invalid request exception.
Default to config's secret.