anchor.diff:    csp:
       directives:
       - frame-ancestors 'none';
  -----+----
  
positive.code: 
  == Step 3: Update the JWT secret
  
  The JWT secret is used for signing session cookies in the AM UI components. Any users with this secret can log in to AM and update their permissions.
  
  Perform the following steps on the AM API component:
  
  . Open your `gravitee.yml` file.
  . In the `jwt` section, update the `secret` value:
  
negative.code: 
  == Step 6: Enable Secure Cookies
  
  Cookies are used by AM API and AM Gateway to keep minimal information about user session. The "Secure" flag instructs a user's browser to only send the cookie along with requests over HTTPS to in-scope addresses.
  
  Perform the following steps on the AM API component:
  
  