Updated auth docs for defaulting to enabled

Also added some structure and fixed a few details.