Include how the auth plugs into the notification

[brownhoward]

The solid spec must define the whole protocol, including how the auth plugs into the notification. Propose that this document does define that. Otherwise we need another parallel document alongside this. The spec must completely define exactly ow to build a solid server.

Originally posted by @timbl in solid/notifications-panel#3 (comment)