adding documentation for the authentication mechanism