Update notes for submitted changes

* Authorizing user should propose roles to delegate for OAuth