Add enable_binding_cookie field to Access application

[Justin-Holmes]

Description

Adds the enable_binding_cookie field to Access applications. This optional field when enabled will provide increased security against compromised authorization tokens and CSRF attacks. Cloudflare's API documentation should be updated soon with the added changes as well.

Related PR: cloudflare/terraform-provider-cloudflare#802.

Has your change been tested?

Here is a cURL request with the new field:

curl --request PUT \
  --url https://api.cloudflare.com/client/v4/accounts/<ACCOUNT_ID>/access/apps/<APP_ID> \
  --header 'authorization: Bearer <TOKEN>' \
  --header 'content-type: application/json' \
  --header 'x-auth-email: <EMAIL>' \
  --header 'x-auth-key: <KEY>' \
  --data '{
        "aud": REDACTED,
        "domain": "asdf.fans",
        "id": REDACTED,
        "name": "asdf-fans",
        "policies": [],
        "allowed_idps": [],
        "session_duration": "24h",
        "uid": REDACTED,
        "auto_redirect_to_identity": false,
        "enable_binding_cookie": true
}'
{
  "result": {
    "aud": REDACTED,
    "created_at": "2020-09-03T20:27:02Z",
    "domain": "asdf.fans",
    "id": REDACTED,
    "name": "asdf-fans",
    "policies": [],
    "allowed_idps": [],
    "auto_redirect_to_identity": false,
    "session_duration": "24h",
    "uid": REDACTED,
    "updated_at": "2020-09-17T17:46:02Z",
    "enable_binding_cookie": true
  },
  "success": true,
  "errors": [],
  "messages": []
}

Types of changes

What sort of change does your code introduce/modify?

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)

[jacobbednarz]

LGTM!

[patryk]

Thanks!