Update notes for submitted changes

* Configure CSRF_COOKIE_SECURE & SESSION_COOKIE_SECURE when use_ssl is true.