add info about making authenticated requests with AB