Update notes for submitted changes

* TempAuth: don't return 401/403 if .r without .rlistings