added clarification for SignalR authentication