Move cookie salt description up.

The cookie salt description belongs inside the bootstrap.php
documentation. Putting this above the filesystem changes and with the
other bootstrap.php changes just makes sense.