We need to move this is a completely different section about route configuration for auth. The guide needs to be clear on the two steps:
1. Setup authentication strategies in the server
2. configure auth on each route

as well as the defaults applied to the routes when auth is configured or not on the server.