diff --git a/customize.dist/login.js b/customize.dist/login.js
index 9020df9d9..2902d303a 100644
--- a/customize.dist/login.js
+++ b/customize.dist/login.js
@@ -42,6 +42,12 @@ define([
         // 32 more for a signing key
         var edSeed = opt.edSeed = dispense(32);
 
+        // TODO
+        // 32 more bytes to seed an additional signing key
+
+        // TODO
+        // 32 more bytes for a symmetric key for block encryption
+
         // derive a private key from the ed seed
         var signingKeypair = Nacl.sign.keyPair.fromSeed(new Uint8Array(edSeed));
 
diff --git a/www/common/outer/local-store.js b/www/common/outer/local-store.js
index c8f58e1f6..645acb1b5 100644
--- a/www/common/outer/local-store.js
+++ b/www/common/outer/local-store.js
@@ -77,7 +77,7 @@ define([
 
 
 
-
+    // XXX update this to take into account blockHash values
     LocalStore.login = function (hash, name, cb) {
         if (!hash) { throw new Error('expected a user hash'); }
         if (!name) { throw new Error('expected a user name'); }