auth: added comments and refined access permissions