Flask session cookie decoder with JWT support