fix #161 and #87

docs/authentication_authorization.rst

@@ -4,14 +4,15 @@
 Authentication / Authorization
 ==============================
 
-Authentication & authorization make up the components needed to verify that
-a certain user has access to the API and what they can do with it.
+Authentication & authorization make up the components needed to verify who a 
+certain user is and to validate their access to the API and what they can do with it.
 
-Authentication answers the question "can they see this data?" This usually
-involves requiring credentials, such as an API key or username/password.
+Authentication answers the question “Who is this person?” This usually involves 
+requiring credentials, such as an API key or username/password.
 
-Authorization answers the question "what objects can they modify?" This usually
-involves checking permissions, but is open to other implementations.
+Authorization answers the question “What actions can they perform?” 
+This usually involves checking permissions such as Create/Read/Update/Delete 
+access, or putting limits on what data the user can access."
 
 Usage
 =====