add auth description to README