Update notes for submitted changes

* Bump vcap-services-base and sc for auth feature