Added documentation for authorization.

Review: https://reviews.apache.org/r/23104