Update notes for submitted changes

* Avoid returning stale token via auth_token property