code: def process_response(self, request, response):
          
          if COOKIE_KEY not in request.COOKIES:
          # Unknown user, set cookie and go on...
              response.set_cookie(COOKIE_KEY, COOKIE_PASS, httponly=True,
                                  expires=datetime.now()+timedelta(days=30))
              # Only logged if we have to set the PASS cookie
              if DJANGOSPAM_LOG:
                  logger.log("PASS RESPONSE", request.method, request.path_info,
                             request.META.get("HTTP_USER_AGENT", "undefined"))                
          return response
docs: Sets "Ok" cookie on unknown users.