Add reminder to test different auth mechanisms

Following recent issues, I added a reminder to test for other auth mechanisms when we triage an HackerOne report