title: why CSRF token is not found in Set-Cookie header field?
body: <p>I have a Django Rest-framework APIView class which is as below:</p>
  
  <pre><code>class HelloView(APIView):
  
      def get(self, request):
          clients = client.objects.all()
          serializer = ClientSerializerAPIView(clients, many=True) 
          return Response(serializer.data)
      def post(self, request):
          serializer = ClientSerializerAPIView(data=request.data)
          if serializer.is_valid():
              serializer.save()
              return Response(serializer.data, status=status.HTTP_201_CREATED)
          return Response(serializer.errors, status=status.HTTP_404_NOT_FOUND)
  </code></pre>
  
  <p>when i send a get request by postman there is a csrf token in the cookie section of postman, but the problem is that there is no Set-Cookie field in the header file received for me to gram csrftoken from.</p>
  
  <p><a href="https://i.stack.imgur.com/T45AH.jpg" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/T45AH.jpg" alt="enter image description here"></a></p>
  
  <p><a href="https://i.stack.imgur.com/8Bun5.jpg" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/8Bun5.jpg" alt="enter image description here"></a></p>