Clarify timeout vs cookieTimeout

I plumbed through the source to try to determine the difference between these two, since they had the exact same description, but were obviously two separate attributes.  I added descriptions as best as I could determine from reading through code in CakeSession.