Update permissions step in README

Update from appPermissions to oauth2Permissions.