Add note to auth/auth-sessions.lisp per issue #7