add auth server instructions