TODO tweaks
Never store current flow session in cookie