Add missing xml comments

:santa: 
I thought passing null here would make it a session cookie, i.e. one where the browser deletes it when the user closes the browser. The implementation of `NancyCookie.ToString()` indicates this to be the case.