Document that cookie is not a valid Traversal (gh-30)