Update notes for submitted changes

* Revert "Don't call credentials_headers() twice"