purposes, or (2) access to cookies "samesite" => "Strict" // Strict SameSite policy for better protection against CSRF attacks ]); }