Update README.md

Added note about X-DEBUG-TOKEN and WebProfilerServiceProvider