By the time Najibullah Zazi checked into a nearby hotel suite with a kitchen in September , he had at least 18 bottles of peroxide-based hair lighteners and pages of notes for how to turn the beauty products into bombs , authorities say .