added first draft of authentication docs