Update src/content/docs/bff/fundamentals/session/handlers.md

Author: maartenba

src/content/docs/bff/fundamentals/session/handlers.md

@@ -55,7 +55,7 @@ The exact settings to use depend on the OIDC provider and its configuration sett
 
 * use authorization code flow with PKCE
 * use a *response_mode* of *query* since this plays nicer with *SameSite* cookies
-* use a strong client secret. Since the BFF can be a confidential client, it is possible to use strong client authentication like JWT assertions, JAR, or ,TLS. Shared secrets work as well.
+* use a strong client secret. Since the BFF can be a confidential client, it is possible to use strong client authentication like JWT assertions, JAR, or mTLS. Shared secrets work as well.
 * turn off inbound claims mapping
 * save the tokens into the authentication session so they can be automatically managed
 * request a refresh token using the *offline_access* scope