I did a lot of research on this topic, but it's still not working for me.
I set my `csrftoken` cookie in Django,and it does in the response object.

But in any browser, it says `no cookies in this site`

Backend:
========

```
@ensure_csrf_cookie
def home(request):
    csrf_token = get_token(request)
    response = HttpResponse()
    response = render(request, 'index.html')
    response.set_cookie(key='csrftoken', value=csrf_token)
    return response

```

Angular:
========

```
myapp.config(function($httpProvider){
    //I use this when in angular1.0.x
    //$http.defaults.headers.post['X-CSRFToken'] = $cookies['csrftoken'];
    //now in angular1.2.x I use code below. but none of them works
    $httpProvider.defaults.xsrfCookieName = 'csrftoken';
    $httpProvider.defaults.xsrfHeaderName = 'X-CSRFToken';
});

```

When I do a POST I get message

```
Failed to load resource: the server responded with a status of 403 (FORBIDDEN)

```

Also if I print out header info in the $http error function:

```
console.log(header('Set-Cookie'));
console.log(header('Access-Control-Allow-Headers'));
console.log(header('Access-Control-Allow-Methods'));

```

all of these three are `null`.

I can't figure it why! Especially, it works fine in `localhost`, either Firefox or Chrome, but in an Apache server, always no cookie in this site.

Is there any `setting` should I do? Can anyone help my with this issue?