only a backend can close a notification