Update notes for submitted changes

* Configurable max password length (bug 1175906)