document signed auth strategy