Cookiefree is setting a session cookie

[jace]

The idea of having a cookie-free domain is that cookies can interfere with asset caching. Therefore, this app setting session cookies defeats the reason for its existence. We should investigate:

1. Whether the session object can be entirely disabled in Flask.
2. Whether Nginx can be configured to strip out cookie headers (Cookie in request and Set-Cookie in response).