Securing Cookies with HttpOnly and SameSite Attributes

Configure sensitive session cookies to be immune to XSS and CSRF vectors.