Update authorization guide

and Remove TBD from readme.md where it is no longer needed

close #5430