add notes for authentication