Follow-up from "feat(webauth): return session ID in uri fragment"

The following discussion from !2 (closed) should be addressed:

• @uveentj started a discussion:

  doc is missing, but will arrive later, says fugu that stefan said that ;-)