Fixed a sentence in the session security docs; thanks claudep.