Update notes for submitted changes

* Support use of token value in place of password.