Added Flask-KVSession to keep session data stored on the server instead of a cookie. Flask stores session data in cookies, which is insecure because the credentials object contains information including the applications client secret.