Update notes for submitted changes

* Do not expire refresh token on HTTP 400