Clarify that Sender is a single address, not an address list

Closes #303