more docs around auth pkg