Add /release/:id/notes/ api + use in admin

Add /auth_token/ url + view
Replace NoteInline admin with ajax note table using api