Use Rack::Session::Cookie instead of session.