Update notes for submitted changes

* Always pass username, even for --token-only