Update notes for submitted changes

* Do not store hashed password on device