Update notes for submitted changes

* Add HSTS and cookie security to dashboard example config