Set Release Date in CHANGELOG for v2.0.0
Clarify new default security model for apache 2.4