* [docs] Fix inconsistency about which sites have optional authentication * update authentication docs