document these non-well-named Apache::AuthCookieHandler options