Document authentication methods, features, and expected settings

As noted in https://github.com/Duke-GCB/gcb-web-auth/pull/25, this application has grown to support quite a few features. The responsibilities of this app should be documented, as well as how integrating clients are expected to use them (e.g. what settings to provide, what model objects to create)