updated readme to discuss option to disable authentication