add authentication notes