added authorization doco for gateway