in src/main/java/com/epam/digital/data/platform/starter/security/WebSecurityConfig.java [96:98]
public CsrfTokenRepository tokenRepository() { return CookieCsrfTokenRepository.withHttpOnlyFalse(); }