Update to use note and note_url for auth