'To save, get the session key as a securely signed string and then set
the modified flag so that the cookie is set on the client for the
current request.'

def save(self, must_create=False):

    self._session_key = self._get_session_key()
    self.modified = True
