adding some notes for authorization