task notifications servlet - auth