1.1 --- a/app/main/_filter/20_session.lua	Tue Oct 20 18:02:38 2020 +0200
     1.2 +++ b/app/main/_filter/20_session.lua	Tue Oct 20 18:04:33 2020 +0200
     1.3 @@ -48,9 +48,11 @@
     1.4      app.session = Session:by_ident(cookie)
     1.5    end
     1.6  
     1.7 -  if not cors_request and not app.session then
     1.8 +  if not app.session then
     1.9      app.session = Session:new()
    1.10 -    app.session:set_cookie()
    1.11 +    if not cors_request then
    1.12 +      app.session:set_cookie()
    1.13 +    end
    1.14    end
    1.15  
    1.16  end