Following up on #167 (review), I think we need to add a good explanation of how access is handled in the API in our README. While our documentation is very detailed for each route, the general process might sound obscure to most