updated auth documentation