fix typo in auth docs