Add documentation to the README.md that the Auth implementation must be provided by the parent application and no particular implementation is assumed