Update notes for submitted changes

* use passlib to store salted password hashes