[Teams] fixes to mTLS docs

products/cloudflare-one/src/content/identity/devices/mutual-tls-authentication.md

@@ -49,13 +49,21 @@ If your zone is using an intermediate certificate in addition to the root certif
 
 The policy must be built with a hostname that was associated in the certificate upload modal. If this is for a client who does not need to log in through an IdP, select **Service Auth** from the drop-down for *Rule Action*. In the Include rule, you can pick from two options for mTLS authentication or both.
 
-![mTLS Policy](../../static/documentation/identity/devices/mtls-policy.png)
+![mTLS Policy](../../static/documentation/identity/devices/create-mtls-rule.png)
 
 |Option|Result|
 |-|-|
 |**Common Name**|Only client certificates with a specific common name will be allowed to proceed.|
 |**Valid Certificate**|Any client certificate that can authenticate with the Root CA will be allowed to proceed.|
 
+8. Save the rule.
+
+9. On the **Edit Application** page, navigate to **Application > Overview**.
+
+10. Set the application session duration to `no duration, expires immediately`. This ensures the certificate is checked on every request.
+
+ ![mTLS session duration](../../static/documentation/identity/devices/mutual-tls-session-duration.png)
+
 ## Test using cURL
 
 Test for the site using mTLS by attempting to curl the site without a client certificate.

products/cloudflare-one/src/content/index.md

@@ -1,5 +1,5 @@
 ---
-title: Home
+title: Overview
 order: 0
 type: overview
 ---

products/cloudflare-one/src/content/setup/index.md

@@ -36,8 +36,6 @@ Let's walk through the setup flow!
 
 1. Choose a payment plan.
 
- ![Choose payment plan](../static/documentation/quickstart/step-3.png)
-
 1. Click **Next**. We'll show you a summary of the payment plan you've selected; you now have the opportunity to go back and choose a different plan or click **Proceed to payment**.
 
  ![Enter payment details](../static/documentation/quickstart/step-4.png)