Update notes for submitted changes

* db2 does not allow None as a key for user_id in user collection
Update notes for submitted changes

* Return 401 when action is not authorized