Fix up docs.

Author: dereuromark

README.md

@@ -116,18 +116,29 @@ echo $this->AuthUser->postLink('Delete', ['action' => 'delete', $id], ['confirm'
 
 ### Required Dependencies
 
-TinyAuth acts as a wrapper around CakePHP's official [Authentication](https://github.com/cakephp/authentication) and [Authorization](https://github.com/cakephp/authorization) plugins.
-You need to install them first, depending on which part you want to use:
+**IMPORTANT:** TinyAuth is a wrapper plugin that extends CakePHP's official plugins. You must understand them first:
+
+#### 📦 Official CakePHP Plugins
+
+| Plugin | Purpose | Documentation |
+|--------|---------|---------------|
+| **[cakephp/authentication](https://github.com/cakephp/authentication)** | Handles user authentication (login, sessions, etc.) | [📖 Official Docs](https://book.cakephp.org/authentication/3/en/index.html) |
+| **[cakephp/authorization](https://github.com/cakephp/authorization)** | Handles user authorization (permissions, access control) | [📖 Official Docs](https://book.cakephp.org/authorization/2/en/index.html) |
 
 ```bash
-# Required for authentication features
+# Install for authentication features (login, sessions)
 composer require cakephp/authentication
 
-# Required for authorization features
+# Install for authorization features (roles, ACL)
 composer require cakephp/authorization
 ```
 
-Then install TinyAuth:
+**Note:** You only need to install the plugin(s) for the features you plan to use.
+The AuthUser component and helper can work standalone without requiring the official plugins.
+
+#### 📦 Install TinyAuth
+
+After installing the required official plugin(s), install TinyAuth:
 
 ```bash
 composer require dereuromark/cakephp-tinyauth
@@ -139,8 +150,6 @@ Finally, load the plugin:
 bin/cake plugin load TinyAuth
 ```
 
-**Note:** The AuthUser component and helper can work standalone without requiring the official plugins. They work with any authentication solution that sets an identity in the request.
-
 ## Docs
 For setup and usage see [Docs](/docs).
 

docs/Authentication.md

@@ -1,11 +1,35 @@
 # TinyAuth Authentication
 The fast and easy way for user authentication in CakePHP applications.
 
+## Prerequisites
+
 **IMPORTANT:** This component wraps the official CakePHP Authentication plugin.
-You must install it first - see [AuthenticationPlugin.md](AuthenticationPlugin.md).
+You **must** install and understand it first:
+
+### Required Steps
+
+1. **Install the official plugin:**
+   ```bash
+   composer require cakephp/authentication
+   ```
+
+2. **Configure middleware and authentication service:**
+   See [AuthenticationPlugin.md](AuthenticationPlugin.md) for complete TinyAuth-specific setup instructions.
+
+   Also refer to the [official CakePHP Authentication documentation](https://book.cakephp.org/authentication/3/en/index.html) for:
+   - Middleware configuration
+   - Authentication service setup
+   - Identity configuration
+   - Login/logout implementation
+
+3. **Load TinyAuth component** (see [Enabling](#enabling) section below)
+
+### What TinyAuth Authentication Adds
 
-Use TinyAuth Authentication Component if you want to add instant (and easy) INI-based action whitelisting to your application.
-You can allow/deny per controller action or with wildcards also per controller and more.
+Once the official plugin is configured, TinyAuth Authentication Component adds:
+- **INI-based action whitelisting** - Define public actions in `auth_allow.ini` instead of code
+- **Zero controller modifications** - No need to call `allowUnauthenticated()` in every controller
+- **Plugin compatibility** - Automatically works with third-party plugins
 
 ## Basic Features
 - INI file (static) based access rights (controller-action setup)