Update notes for submitted changes

* Make auth_token middleware fetching respect prefix