Update README on endpoint auth requirement