fix: allow only one headejr"

flask_app.py

@@ -9,12 +9,13 @@ import re
 import pandas as pd
 
 app = Flask(__name__)
-CORS(app, supports_credentials=True, origins="*", allow_headers=["Content-Type", "Authorization", "Access-Control-Allow-Credentials"], expose_headers=["Set-Cookie"])
-app.config['SESSION_COOKIE_SAMESITE'] = 'None'
-app.config['SESSION_COOKIE_SECURE'] = True
+CORS(app, supports_credentials=True, origins="https://db-bot-amber.vercel.app/", allow_headers=["Content-Type", "Authorization", "Access-Control-Allow-Credentials"], expose_headers=["Set-Cookie"])
 app.secret_key = os.urandom(24)  # Set a secret key for session encryption
-app.config["SESSION_COOKIE_SAMESITE"] = "None"
-app.config["SESSION_COOKIE_SECURE"] = True
+app.config['SESSION_COOKIE_SAMESITE'] = 'None'
+app.config['SESSION_COOKIE_SECURE'] = False 
+app.config['SESSION_COOKIE_HTTPONLY'] = True
+
+
 prompt_manager = PromptManager()
 prompt_manager.load_prompt('base_schema', 'prompts/base_prompts.txt')
 base_prompt = prompt_manager.get_prompt('base_schema')