Jason Perrin

This is to prevent accidentally clicking it and logging out of your whole session and losing whatever you were working on. Most websites are less state than a whole desktop...

I believe we're [already doing this in ocfweb](https://github.com/ocf/ocfweb/blob/63f38eac68e2f73aeac82776e42c30cb70b5fb12/ocfweb/account/vhost.py#L26-L29) which [calls out to ocflib](https://github.com/ocf/ocflib/blob/c13cb0fbac88450077dd5c33535058bf5b5c2814/ocflib/misc/validators.py#L9-L16), which indicates that either domains are getting past this check somehow, or maybe we aren't checking for...

@abizer suggested using [jazzband/django-debug-toolbar](https://github.com/jazzband/django-debug-toolbar), and it looks pretty nice.

@dkess++ thanks for making this a separate issue

This should be pretty easy to do if we use puppetdb for the server list, since there's a bunch of SSH key fingerprint facts: ``` sshdsakey sshecdsakey sshed25519key sshfp_dsa sshfp_ecdsa...

We can probably auto-generate all the prefixes too, there's some things that do that (like [autoprefixer](https://github.com/postcss/autoprefixer) for instance), so that seems reasonable in support.

> Hi @jvperrin, sorry for the delay on this one. Our Splunk IT suite needs some attention (#22379). One thing that stood out is that this new cookie is mandatory...