Update doc to mention http_authenticable is false by default