Update notes for submitted changes

* Authentication API + NoAuth backend