Update notes for submitted changes

* Use AccessInfo in auth_token middleware