added note for authentication