Update API docs regarding authentication