Update notes for submitted changes

* Use constant time comparison in tempURL