Update notes for submitted changes

* Escape credentials for cirros image upload