Add docs on authenticating users