diff --git a/doc/xdocs/changes.xml b/doc/xdocs/changes.xml
index 0940b81242..13dd0b429c 100644
--- a/doc/xdocs/changes.xml
+++ b/doc/xdocs/changes.xml
@@ -26,6 +26,7 @@
+ Changed order of credentials verification and expiry checking in DaoAuthenticationProvider. Password must now be successfully verified before expired credentials are reported.
AnonymousProcessingFilter offers protected method to control when it should execute
AbstractAuthenticationToken.getName() now returns username alone if UserDetails present
AuthorityGranter.grant now returns a java.util.Set of role names, instead of a single role name