Add note about authentication to README