setCSRFCookie sets the CSRF token cookie with hardcoded security settings. Both HttpOnly and Secure are hardcoded to ensure the Double-Submit Cookie pattern works correctly: - HttpOnly=false: Allows JavaScript to read the cookie value - Secure: Set to true only for HTTPS requests (allows development
(reqCtx *models.RequestContext, token string)
source not stored for this graph (policy: none)