update to README to introduce credentials