authorization notes