update NOTES, check loginredirect