improve docs for testing with real auth