auth: added docs for redirection flow