Documentation - Small update to SESSION_COOKIE_DOMAIN documentation

I'm explaining a slight (but potentially crippling) caveat for updating `SESSION_COOKIE_DOMAIN` on a production site.