mention 'auth' in Readme.md