update README for specs

Or you can use
```
allow_any_instance_of(GrapeDoorkeeper::Middleware).to receive(:verify_token).and_return(true)
```
to avoid stubing `token.accessible?`