add authentication docs