update README: device auth