update README with JWT info