Clarification that cookieParser(secret) is required now.

Please see strongloop/express#1859 for a discussion about improving the wording.