So when I only have the JWT_EXTENDED cookie set my axios/flask/gunicorn app works swimmingly....
so xis.test.com is great.... << domain of the cookie
the problem starts when other cookies get set under ".test.com" then ajax calls with a larger return time or more data retuned get a BAD DATA LENGTH 200 issue which I've seen here on SO...so I'm just not sure what is going on....
Sorry for the limited data but there is nothing inherently different between the calls that work and don't just the fact there are about an extra 18 cookies set by a DUO login in the browser.
If I switch to an incognito window there is no issue with the app at all.
Weird..