Update README.md

added some links describing JWT