added notes and diagram on app sessions vs sso session