note re authentication