Clarified required webauth setup in README.md.