authentication notes