document 'session_expires' setting
Mention max cookie size

Closes #2
changelog

Fixes #2
Fixes #4