Update notes for submitted changes

* Fix webob.exc.HTTPForbidden parameter miss