flask: Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header · Teire