Change the cookie serializer to :json
Change the cookie serializer to :json

As there are potential remote code execution issues with the marshal
approach.

alphagov/manuals-publisher,alphagov/manuals-publisher,alphagov/manuals-publisher