Add description of authentication framework in documents/using-annalist.md; minor tweaks