Add note about authentication