Next Auth setting cookie in client but unsure where

[pandydavey]

I have a page that is trying to set a csrf token, i'm using this for other forms and locally it's working fine. But on vercel it's all a bit weird. Whilst debugging i noticed that on a page without any next auth code with cookies cleared and a hard refresh there are no cookies in the request (network tab). When i refresh the page there is a cookie in the request. As there's nothin on the SSR that is setting on it's clearly being set in the client.

i am using the app.js from the docs, but i dont in that how a cookie is set. Can someone help me figure this out?

Because of this client 'issue' when i csrfToken in my getServerSide it sets as expected, but then the client seems to overwrite the setting. This then means when i try and confirm the token using the secret it differs.

Help would be super appreciated.