add diagrams for stateful and stateless authentication