add notes about not listening on ports and not persisting sessions