Update README.md

Author: mproqueueit

README.md

@@ -32,8 +32,8 @@ Both header and payload are in JSON format.
 - `ti`: Unique Token ID (e.g. uuid). Used to uniquely identify tokens and restrict replay attacks. Required.
 - `c`: The Customer ID of the issuer. Token will only be valid on events on this account. Required.
 - `e`: The Event ID. If provided, token will only be valid on this event. Optional.
-- `ip`: The IP address the user the token is issued to. If provided, the IP address is validated before issuing the token. Optional.
-- `xff`: The X-Forwarded-For headerof the request when the token is issued. If provided, the X-Forwarded-For header is validated before issuing the token. Optional.
+- `ip`: The IP address the user the token is issued to. If provided, the IP address in the token is validated against the client IP before issuing a new Queue id. Optional.
+- `xff`: The X-Forwarded-For headerof the request when the token is issued. Only used for logging. Optional.
 
 ### Token Payload