Update notes for submitted changes

* Enforce ``saml2`` protocol in Apache config