2 ms·Seems logical - only allow the endpoint to set the cookie.by thrill 12y agoSeems logical - only allow the endpoint to set the cookie.