add question about user-backend

New bugs should also contain some info about the user-authentication
wouldnt it be better to have a extra document for (database-) specifics at which you could point people after dissecting the initial bug-report?