In Flask, session data are stored in a cookie by default.
Using a server side session, there is no risk of putting too much data
in the session and transmissting a big cookie on every request
(only an id is sent in the cookie).

Redis is used as backend (without persistent storage).