CSRF_COOKIE_HTTPONLY = True.
CSRF_COOKIE_SECURE = True.