Update notes for submitted changes

* Ensure username passed by REMOTE_USER can contain '@'