Docs: adds warning in the http authentication manual