Add oauth secret setting to README