Update README with 2-factor auth