Update notes for submitted changes

* V3 token operations should use /v3/auth