update unfuddle documentation

it isn't clear from the documentation what the httponly box does.  updated the documentation so it makes sense.