Update notes for submitted changes

* Make auth url extensible to other mechanisms