currently the api docs only show friendship. Add stuff to the docs for authentication and authorisation