Update notes for submitted changes

* Use urandom rather than openssl for password gen