added a section on authorization to the security intro document