diff --git a/user.py b/user.py
index 39e6fad..7a7cf4d 100644
--- a/user.py
+++ b/user.py
@@ -7,7 +7,11 @@ from status import st, Status
 # pylint: disable=no-member
 
 ################################################################################
-# Class describing Person in the database, and via sqlalchemy, connected to the DB as well
+# Class describing Person in the database and DB via sqlalchemy
+# id is unique id in DB
+# dn is ldap distinguised name
+# any entry in this DB is effectively a record you already authed successfully
+# so acts as a session marker.   If you fail ldap auth, you dont get a row here
 ################################################################################
 class PAUser(UserMixin,db.Model):
     __tablename__ = "pa_user"