'We don\'t want to send cookies over HTTP, especially not CSRF and
session cookies, for obvious security reasons.'

def test_no_cookies_over_http(self):

    self.make_participant(u'alice')
    redirect = self.client.GET(u'/', auth_as=u'alice', HTTP_X_FORWARDED_PROTO='http', HTTP_HOST='gratipay.com', raise_immediately=False)
    assert (redirect.code == 302)
    assert (not redirect.headers.cookie)
