doc of new auth system