settings: remove CSRF_COOKIE_HTTPONLY setting (#20)

Setting CSRF_COOKIE_HTTPONLY breaks the Django REST framework HTML forms UI
since it uses Javascript to query the CSRF token.

edpcmentoring/edpcmentoring/settings.py

@@ -120,7 +120,6 @@
 # Various security settings
 SECURE_CONTENT_TYPE_NOSNIFF = True
 SECURE_BROWSER_XSS_FILTER = True
-CSRF_COOKIE_HTTPONLY = True
 X_FRAME_OPTIONS = 'DENY'
 
 # These settings require that we are *definitely* being served over HTTP+TLS.