Fix changelog display
Suggest that authenticated implementations use only HTTPS
Remove requirement to parse jurisdiction URLs in filter