This happens when you plug-in the cookie policy middleware on the app and use an oauth provider for authentication.