Minor README tweak and use the /authorization endpoint (with the
product's auth token) instead of the /core_team endpoint