This seems to be an issue with modern browsers simply ignoring standards with non persistent cookies.
Can read more about it on StackOverflow.
Basically it's advised to better use session storage which is the default setting already.
As a "test", running Chrome in Incognito mode seems to produce the (correct) expected behavior.
