add more info about auth levels