add note on authenticated vs unauthenticated calls
update README with a small note on debugging