Clarification that cookieParser(secret) is required now.

Please see https://github.com/strongloop/express/issues/1859 for a discussion about improving the wording.