finally, modify flask to use the old session cookie interface

this is needed to get openid to work properly.
this should fix #184.
Note: openid also requires account creation to be enabled.