Update notes for submitted changes

* escape and encode HTTP headers