Update notes for submitted changes

* auth_token middleware hashes tokens with configurable algorithm