improve documentation of cookie secret
readme: there's something to be said for consistently wrapped lines