diff --git a/README.md b/README.md
index 9401179..2e22c05 100644
--- a/README.md
+++ b/README.md
@@ -41,6 +41,8 @@ whiskr is a private, self-hosted web chat interface for interacting with AI mode
 
 ## TODO
 
+- restrict model list (optionally allow all for authenticated users)
+- make authentication optional (unless no allowed models)
 - improved custom prompts
 - settings
   - auto-retry on edit