Removed lies about session cookies from app docs. Documented Session#getTTL.