Better cookie docs on sessions.

Suggested as part of #1488.