Update README.md to note that grant read-and-write access to bot application