added note on authentication