Updated README.
/notes/:categoryName is now a protected resource (redirect to login).
/api/notes/:categoryName is now a protected resource (return 401).