(being respectful with occurences that might change the behaviour, i.e. default database prefixes)

The text was copied from https://code.google.com/p/simplesamlphp/wiki/LostState, corrected some language and added a piece on http/https stemming from the comments on that page.

Fixes #214