updated readme, changed to authorization header