add key important notes about how to handle cookies in client side and back end side