Niiice!
I thought it was strange that cookies (and redirects) were needed at all. It seemed like just adding a definable parameter at the install URL would be enough to get rid of them.
I think I also read about iframe-less apps - I can’t wait to read about the details of that magic 