Update notes for submitted changes

* Sanitize passwords when logging payload in wsgi