authentication documentation first draft