README: add authentication