[Serusers] clarification about authentication