Update notes for submitted changes

* Fix OAuth1 to not JSON-encode create access token response