diff --git a/SciPost_v1/settings/staging.py b/SciPost_v1/settings/staging.py
index c846bf53945d8ef18d52e5bd5bc1d553e7342ab0..48120c079d0f89189a545a27d9afafd9d4053968 100644
--- a/SciPost_v1/settings/staging.py
+++ b/SciPost_v1/settings/staging.py
@@ -3,8 +3,8 @@
 from .base import *
 
 # THE MAIN THING HERE
-DEBUG = True
-ALLOWED_HOSTS = ['scipoststg.webfactional.com']
+DEBUG = False
+ALLOWED_HOSTS = ['scipoststg.webfactional.com', 'www.scipoststg.webfactional.com']
 
 # Static and media
 STATIC_ROOT = '/home/scipoststg/webapps/scipost_static/'
@@ -21,3 +21,8 @@ RECAPTCHA_PRIVATE_KEY = get_secret("GOOGLE_RECAPTCHA_PRIVATE_KEY")
 # Logging location
 LOGGING['handlers']['scipost_file_arxiv']['filename'] = '/home/scipoststg/webapps/scipost/logs/arxiv.log'
 LOGGING['handlers']['scipost_file_doi']['filename'] = '/home/scipoststg/webapps/scipost/logs/doi.log'
+
+# Cookies
+SESSION_COOKIE_SECURE = True
+CSRF_COOKIE_SECURE = True
+