Added hint about cross-origin cookies.  Also removed data.sessionStore.
New load/save session code.