Update notes for submitted changes

* Service Token Composite Authorization Specification