response = JSONResponse(...)
    response.set_cookie(..., httponly=True)
    return response

var myHeaders = new Headers();
        myHeaders.append("accept", "application/json");
        myHeaders.append("Content-Type", "application/x-www-form-urlencoded");

        var urlencoded = new URLSearchParams();
        urlencoded.append("grant_type", "");
        urlencoded.append("username", "string");
        urlencoded.append("password", "string");
        urlencoded.append("scope", "");
        urlencoded.append("client_id", "");
        urlencoded.append("client_secret", "");

        var requestOptions = {
            method: 'POST',
            headers: myHeaders,
            body: urlencoded,
            redirect: 'follow',
            credentials: "include"
        };

        fetch("http://127.0.0.1:8000/auth/sign-in/", requestOptions)
            .then(response => response.text())
            .then(result => console.log(result))
            .catch(error => console.log('error', error));