Add a line about auth methods being not secure