use 2 separate events for update and invalidation
specs wording
updated authenticator docs
docs improvements