improve text and add example for OIDCCookieDomain
# Specify the domain for which the "state" and "session" cookies will be set.
# This must match the OIDCRedirectURI and the URL on which you host your protected
-# application. When using a relative OIDCRedirectURI this setting should most probably empty.
+# application. Use the literal value of the domain name that will end up in the "Domain"
+# attribute value for the Set-Cookie header, no leading dot required.
+# Example domain- (instead of default host-)wide cookie:
+# OIDCCookieDomain example.org
# When not defined the default is the server hostname that is currently accessed.
#OIDCCookieDomain <cookie-domain>
