Some short docs on the auth controllers.  Not sure if it should be longer, since the auth is mostly covered by the clients.
Revision based on recent fixes.