implement "NO_SESSION" option to avoid saving session cookies

I'm developing a REST API using flask-login and flask-principal through flask-security,
for a REST API authentication (for example using the request_loader) it would be better not setting any cookie, since they are not needed.