README.md updated with description of header authentiation.