add to readme

Signed-off-by: David Ranum <dlranum@us.ibm.com>

README.md

@@ -34,7 +34,7 @@ In order to install the helm chart, you must provide the URL of a FHIR server an
 
 **Important:**
 - The FHIR server URL needs to be reachable from your browser, i.e. from your computer
-- The FHIR server needs to be unauthenticated. When deploying along with [Health Patterns](https://github.com/Alvearie/health-patterns), there is a FHIR Proxy Chart that can remove the authentication of an IBM FHIR server.
+- The FHIR server needs to be unauthenticated. When deploying along with [Health Patterns](https://github.com/Alvearie/health-patterns), there is a FHIR Proxy Chart that can remove the authentication of an IBM FHIR server. **Note:** although these instructions are for an unauthenticated FHIR server, there are some additional options [here](https://github.com/Alvearie/patient-browser/tree/master/security).
 - In order to expose the FHIR server, an ingress can be created by including ingress.class and ingress.hostname values.
 
 ```bash