Update auth.md