State cookie is now set outside of the flask session