Add note about two-pass authentication