adding changelog about authentication