Authentication and Authorization is done through MME but details are provided by HSS to MME.
For UE, MME is an anchor point to do all procedures like authentication, default bearer and dedicated bearer creation. It is not necessary MME talks only to home HSS, it talks to other network HSS for the roaming users. Some authentication and authorization should be in place.