readme about authentication setup