Update auth.md

Clarify justification