work with any number of certificate lines
egads! I can't believe we weren't escaping sessionids!
update docker image to use official pike image, add a demo document