update docs

docs/installation.rst

@@ -53,12 +53,15 @@ Here's the list of the subpackages and what they enable:
 +-------------+------------------------------------+------------------------------------------------+
 |  devel      | ``pip install airflow[devel]``     | All Airflow features + useful dev tools        |
 +-------------+------------------------------------+------------------------------------------------+
-|  crypto     | ``pip install airflow[crypto]``    | Encrypt passwords in metadata db               |
+|  crypto     | ``pip install airflow[crypto]``    | Encrypt connection passwords in metadata db    |
 +-------------+------------------------------------+------------------------------------------------+
 |  celery     | ``pip install airflow[celery]``    | CeleryExecutor                                 |
 +-------------+------------------------------------+------------------------------------------------+
 |  async      | ``pip install airflow[async]``     | Async worker classes for gunicorn              |
 +-------------+------------------------------------+------------------------------------------------+
+|  password   | ``pip install airflow[password]``  | Password Authentication for users              |
++-------------+------------------------------------+------------------------------------------------+
+
 
 Configuration
 '''''''''''''

docs/security.rst

@@ -11,6 +11,20 @@ SSH tunnels.
 It is however possible to switch on authentication by either using one of the supplied
 backends or create your own.
 
+Password
+''''''''
+
+One of the simplest mechanisms for authentication is requiring users to specify a password before logging in.
+Password authentication requires the used of the ``password`` subpackage in your requirements file. Password hashing
+uses bcrypt before storing passwords.
+
+.. code-block:: bash
+
+    [webserver]
+    authenticate = True
+    auth_backend = airflow.contrib.auth.backends.password_auth
+
+
 LDAP
 ''''