Update notes for submitted changes

* Don't log sensitive auth data