title: django posts receive CSRF verification failed after switching to load balancer
body: <p>I have a working login template that does a post and looks like:</p>
  <pre><code>&lt;form action=&quot;&quot; method=&quot;post&quot;&gt;
              {% csrf_token %}
                &lt;br&gt;
                    {{form.email}}
                   
  
                &lt;div class=&quot;text-center&quot;&gt;
                  &lt;button type=&quot;submit&quot;&gt;Login&lt;/i&gt;&lt;/button&gt;
                &lt;/div&gt;
  
              &lt;/form&gt;
  </code></pre>
  <p>My SSL settings look like:</p>
  <h1>ssl</h1>
  <pre><code>SECURE_SSL_REDIRECT = False
  SECURE_HSTS_SECONDS = 3600
  SESSION_COOKIE_SECURE = False
  SECURE_PROXY_SSL_HEADER = None
  CSRF_COOKIE_SECURE = False
  </code></pre>
  <p>I made two changes. I switched to an aws ec2 elastic load balancer and from https to http.</p>
  <p>Now I am getting an error:</p>
  <blockquote>
  <p>Forbidden (403) CSRF verification failed. Request aborted.</p>
  <p>You are seeing this message because this site requires a CSRF cookie
  when submitting forms. This cookie is required for security reasons,
  to ensure that your browser is not being hijacked by third parties.</p>
  <p>If you have configured your browser to disable cookies, please
  re-enable them, at least for this site, or for 'same-origin' requests.</p>
  </blockquote>
  <p>Does anyone know why this is occurring?</p>