diff --git a/apiserver/apiserver/settings.py b/apiserver/apiserver/settings.py
index ef3a625..22e3747 100644
--- a/apiserver/apiserver/settings.py
+++ b/apiserver/apiserver/settings.py
@@ -50,6 +50,8 @@ if DEBUG:
     ]
 
 SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
+SESSION_COOKIE_SECURE = True
+CSRF_COOKIE_SECURE = True
 
 
 # Application definition