Update readme with rate limiting and auth instructions