- CSRF cookie will always be set upon visting the homepage