tighten the options around cookies for better security

TES/tes/__init__.py

@@ -12,6 +12,9 @@ import datetime
 app.config['PERMANENT_SESSION_LIFETIME'] = datetime.timedelta(seconds=3600)
 app.config['SESSION_REFRESH_EACH_REQUEST'] = True
 app.config['SESSION_COOKIE_NAME'] = 'tessession'
+app.config['SESSION_COOKIE_SECURE'] = True
+app.config['SESSION_COOKIE_HTTPONLY'] = True
+app.config['SESSION_COOKIE_SAMESITE'] = 'Strict'
 app.config['APPLICATION_ROOT'] = '/'
 if not app.config['LOCAL_DEV']:
     app.config['APPLICATION_ROOT'] = '/tes'