Update sessions doc with cookie token URL info and example