Update notes for submitted changes

* Use constant time comparison in tempURL
Update notes for submitted changes

* Use constant time comparison in tempURL