readme about auth