added missing asset-installer-paths info
added required cookie validation stuff to config
more ready updates (setup/install notes)