Document locksmith.lightauth.

@dcloud requested that I document the locksmith.lightauth alternative middleware, so I've now done so. Anyone have any objections to any of this? (In particular, is it still clear which bits apply to which of the three middleware options we'll now have?)