You're using `COOKIE_SET_COOKIE` here but not `COOKIE_EXPIRES`, `COOKIE_MAX_AGE`.

Personally, I'd remove the `COOKIE_SET_COOKIE` constant completely ... I don't see what's the point in having it.