first draft of enabling authentication guide