Update notes for submitted changes

* Drop webob from auth_token.py