add authentication doc