meta tag to verify
Added CSRF_COOKIE_HTTPONLY = True.