scenario description
add httpOnly to session cookie
remove obsolete cookies error and secret
add path to discarding cookies
add instructions