Update notes for submitted changes

* Don't log the OS_AUTH_TOKEN in the worker