fix feed refresh

username and password were global vars that get lost, so grab them from
widget preferences when loading the feed and setting the Authorization
header on the XHR.
update install instructions

Rewrite install instructions for how to install from Github using the
Finder instead of command line.