title: Cypress cutting down "X-CSRFToken" header
body: <p>Noticed that Cypress test runner is cutting out <code>X-CSRFToken</code> from the request header, which causes the request to return <code>403 Forbidden</code>. Here is the screenshot of headers from manual run and Cypress test run,</p>
  
  <p><strong>Screenshot taken while navigating in Chrome browser:</strong>
  <a href="https://i.stack.imgur.com/VPk9D.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/VPk9D.png" alt="enter image description here"></a></p>
  
  <p><strong>Screenshot taken while running Cypress test:</strong>
  <a href="https://i.stack.imgur.com/HT27A.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/HT27A.png" alt="enter image description here"></a></p>
  
  <p>To confirm this, I replayed the request through <code>curl</code> attaching the <code>X-CSRFToken</code>. It worked fine then. How could I handle this while running Cypress tests?</p>
  
  <p><strong>NOTE:</strong> This happens on performing drag and drop events using <code>trigger()</code> function</p>