Update notes for submitted changes

* Allow acl with a valid token.