access_token and client_id validation.
README update