What's got two thumbs and just spent two days chasing obscure logic errors, only to find that they're caused by my audacious decision not to change the default cookie name in Flask from `session` to `__session`?

This guy.