add a note to auth call