diff --git a/README.md b/README.md
index 35d25a1..64b38a0 100644
--- a/README.md
+++ b/README.md
@@ -17,6 +17,7 @@
   file for receivers, with zero compression so extraction is quick
 - Sanitises filenames, using sensible non-obnoxious defaults that
   should be safe across platforms
+- Rudimentary password authentication for uploading files
 - Fires a laser beam that turns you trans
 
 ## configuration
@@ -67,8 +68,3 @@ git clone https://git.xeno.science/xenofem/transbeam
 cd transbeam
 cargo run --release
 ```
-
-## todo
-
-- uploader auth
-- downloader auth