Update notes for submitted changes

* auth_token configuration: always set auth_uri, use admin endpoint