Fixed permit-none issues; added To Dos to docs; added standard cookie prefix