Duplicate request cookies

[tmackenzie]

when using axios its observed that duplicate csrf and session cookies are sent. When duplicate cookies are sent purge them so only one is used.

Take the opportunity to:

• externalize the regex for static assets
• force http only cookies even if sent without http only flag.