Document s2k and cookie auth methods; resolve bug 153