add documentation for auth* directives