Describe authentication mechanisms

[mwullink]

Add text about possible way to secure api using:

• basic auth
• api token
• jwt
• oauth

but the auth is not part of the standard, implementors are free to choose a secure auth they like.

[mwullink]

done