Update notes for submitted changes

* Allow auth using a pre-fetched token