Update notes for submitted changes

* Correctly handle auth_url/token authentication