clarify the sign in process in README.md