Documented CookieAuthentication table
Made `token` and `created` a composite primary key

In case by stroke of luck the same token gets created twice