# Force cookie-based sessions (no DB writes) SESSION_ENGINE = 'django.contrib.sessions.backends.signed_cookies' SESSION_COOKIE_AGE = 1209600 # 14 hari SESSION_COOKIE_SECURE = True CSRF_COOKIE_SECURE = True