add more javadoc to helpers explaining how authentication works when not using username and password