Update notes for submitted changes

* Refactor server password metadata to avoid direct db usage