```ruby
# frozen_string_literal: true

SecureHeaders::Configuration.default do |config|
  config.cookies = {
    secure: true,
    httponly: true,
    samesite: {
      strict: true
    }
  }
  config.referrer_policy = 'origin-when-cross-origin'
  config.csp = SecureHeaders::OPT_OUT
end
```

Fix a bug that user cannot remote follow
user
```ruby
# frozen_string_literal: true

SecureHeaders::Configuration.default do |config|
  config.cookies = {
    secure: true,
    httponly: true,
    samesite: {
      lax: true
    }
  }
  config.referrer_policy = 'origin-when-cross-origin'
  config.csp = SecureHeaders::OPT_OUT
end
```
assistant