What are best practices for using secure cookies?

        // Setting a secure cookie example in PHP
        setcookie("user_token", $token, [
            'expires' => time() + 3600,  // 1 hour expiration
            'path' => '/',
            'domain' => 'yourdomain.com', // adjust this to your domain
            'secure' => true,              // Ensure the cookie is sent over HTTPS
            'httponly' => true,            // Prevent JavaScript access to the cookie
            'samesite' => 'Strict'         // Use 'Lax' or 'Strict' to mitigate CSRF attacks
        ]);