add diagrams explaining requiresAuthentication and callback filters