added docs explaining the authentication hooks