user can now set http_only and samesite

[henrikac]

This PR adds two additional parameters to the CSRF handler that makes it possible to set httpOnly and SameSite. This is something that was requested in #27 and #28 .

Should close #27, close #28

[henrikac]

@sdogruyol just pinging in case you've missed this PR

[sdogruyol]

Thanks @henrikac , I'm actually waiting on #1 (comment) 😄 What do you think?

[henrikac]

@sdogruyol I like the idea of including it in kemal-session!

I have tried to do this a few times but I keep getting errors saying that some constant has already been set because adding require "kemal-csrf" to kemal-session will set kemal-session constants twice.

[sdogruyol]

@henrikac which constants are those?

[henrikac]

@sdogruyol Kemal::Session::Config::INSTANCE and Kemal::Session::STORABLE_TYPES + some of the macros (if not all of them)

[sdogruyol]

Thanks a lot @henrikac 🙏