Update notes for submitted changes

* Login client should be autoapprove for everything by default
* Remove uneccessary security annotations