=> "$domain", "secure" => true, // Prevent client-side JavaScript access to cookies "samesite" => "Strict" // Strict SameSite policy for