Clarify timeout vs cookieTimeout

As best I can tell from the source, at least.
Merge pull request #531 from cincodenada/patch-2

Clarify timeout vs cookieTimeout