Current README.md leads to session not being stored

[pcon]

The current README.md has {session: false} in the declaration of the authentication endpoint. This leads to issues using it as a user authentication method for a multi-page app.

I would suggest either removing the {session: false} from the README or adding that to a new section explaining why you would want to have {session: false}