Update authentication.md

clarify expires_in