Added Flask-KVSession to keep session data stored on the server instead of a cookie. Flask stores session data in cookies, which is insecure because the credentials object contains information including the applications client secret.
Merge pull request #2 from cartland/master

Fix for #1 "Credentials object should not be stored in a cookie"