add note about non-bw-compat between SignedCookieSessionFactory and UnencryptedCookieSessionFactory.  Ref #1200.