Update node.js/authentication.md

node.js/authentication.md

@@ -413,7 +413,9 @@ module.exports = function custom_auth (req, res, next) {
 
 ## Authentication Enforced in Production
 
-In a productive scenario with an authentication strategy configured, for example the default `xsuaa`, all CAP service endpoints are authenticated by default, regardless of the authorization model. That is, all services without `@restrict` or `@requires` implicitely get `@requires: 'authenticated-user'`. This can be disabled via feature flag `cds.env.requires.auth.restrict_all_services: false`, or by using [mocked authentication](#mocked) explicitly in production.
+In a productive scenario with an authentication strategy configured, for example the default `xsuaa`, all CAP service endpoints are authenticated by default, regardless of the authorization model. That is, all services without `@restrict` or `@requires` implicitely get `@requires: 'authenticated-user'`.
+
+This can be disabled via feature flag `cds.env.requires.auth.restrict_all_services: false`, or by using [mocked authentication](#mocked) explicitly in production.
 
 ## XSUAA in Hybrid Setup {#xsuaa-setup}