add auth instructions