Add new authentication tutorial to the README

[stevepolitodesign]

Shameless plug, but I think the guide I wrote could be a good resource since it covers topics such as timing attacks and multiple sessions. It also highlights the Current Attributes and Active Record Signed Id APIs, which aren't mentioned in older tutorials.