added Authentication spec to API blueprint