Update notes for submitted changes

* Make SecurityGroupAPI use Object instead of instance_get_by_uuid()