Update README.md

More changes regarding using cookies for auth purposes as a no-no.