fix(authentication): add breaking change notice

BREAKING CHANGE: PR #3590 rewrote type UserProfile, add the missing
breaking change tag here to amend the one in #3590

packages/authentication/README.md

@@ -53,6 +53,14 @@ For a tutorial on how to add **JWT** authentication to an application, see
 For some background on our design decisions, please read
 [Multiple Authentication strategies](./docs/authentication-system.md).
 
+## Note
+
+Starting from version `@loobpack/authentication@3.0.0`, type `UserProfile` is
+extracted into package `@loopback/security`, and contains breaking change of its
+members, make sure you follow the
+[new tutorial](https://loopback.io/doc/en/lb4/Loopback-component-authentication.html)
+when build the authentication system.
+
 ## Contributions
 
 - [Guidelines](https://github.com/strongloop/loopback-next/blob/master/docs/CONTRIBUTING.md)