Added comments to indicate the exclusive nature of the two options for session timeouts

Expiration can be one or the other: lifetime or expire_on_close. See
http://stackoverflow.com/questions/26167047/authentication-in-laravel-4-persisting-beyond-session-timeout-is-this-localho?noredirect=1#comment41025042_26167047