note for authorization