Update notes for submitted changes

* if we have a valid auth token, use it instead of generating a new one