docs for shared-secret auth (bug 849379)