Stop setting session cookies on /static and /_asset

Refactored the app.psgi as part of this