Update notes for submitted changes

* Check role delegated uses HEAD not GET