Assessing and tuning brain decoders: cross-validation, caveats, and guidelines