docs: note secure/httponly defaults and the replay rationale#22

sebdroid merged 1 commit into

mainsebdroid/cookiecrypt:mainfrom

docs/secure-defaultssebdroid/cookiecrypt:docs/secure-defaultsCopy head branch name to clipboard