documented server/configuration/authentication-and-authorization