adding clearer Authentication instructions