Improving doc (chapter: security)
Setting session group now affects unsecure session by default, even in https.
(for consistency with eliom references)