added authorization docs