Update notes for submitted changes

* Fix auth-token middleware to understand v3 tokens