Update notes for submitted changes

* Remove hardcoded login url in session creation code