auth deny centralized
update source code docs