Add CSRF_COOKIE_* settings.
Merge pull request #1 from matchbox/add-csrf-cookie-flags

Add CSRF_COOKIE_* settings.