title: Playframework 2.8 setSession works on Postman, but not on browser
body: <p>I've been working on an api project on Scala Playframework 2.8.
  Everything seems to work fine on Postman, but when trying to connect it to my frontend project, <code>.withSession</code> doesn't create any cookie in the browser although it does create one in Postman.</p>
  <p>I thought it had something to do with the <code>csrf</code> and <code>cors</code> definitions on the api's <code>application.conf</code> but I've edited it a lot and nothing works.</p>
  <p>I'm getting no errors, just don't get the session to be set in the client, so i can't log-in anyone to the api :\</p>
  <p>I'm sharing my <code>application.conf</code> code:</p>
  <pre><code># https://www.playframework.com/documentation/latest/Configuration
  
  # Default database configuration using MySQL database engine
  # Connect to playdb as playdbuser
  db.default.driver=com.mysql.jdbc.Driver
  db.default.url=&quot;blabla&quot;
  db.default.username=&quot;blalba&quot;
  db.default.password=&quot;blabla&quot;
  
  play.http.session.secure = false
  play.http.session.cookieName = &quot;PLAY_SESSION&quot;
  play.http.session.httpOnly = true
  
  play.filters.disabled+=play.filters.csrf.CSRFFilter
  play.cache.bindCaches = [&quot;db-cache&quot;]
  
  play.filters.hosts {
    allowed = [&quot;.&quot;]
  }
  
  play.filters.enabled += &quot;play.filters.cors.CORSFilter&quot;
  play.filters.cors {
    allowedHttpMethods = [&quot;GET&quot;, &quot;HEAD&quot;, &quot;POST&quot;, &quot;PUT&quot;, &quot;OPTIONS&quot;]
    allowedHttpHeaders = [&quot;Accept&quot;, &quot;Content-Type&quot;]
  
  }
  
  play.http.secret.key = &quot;blablabla&quot;
  
  </code></pre>
  <p>Anyone has an idea why the browser blocks me from creating the session from the Scala playframework 2.8 api?</p>