Update notes for submitted changes

* Revert "Fix middleware to not access session fields without user auth"