code: public static void setReferrerURLCookieHandler(ReferrerURLCookieHandler referrerURLCookieHandler) {
          // in case, the webAppSecurityConfig is dynamically changed
          if (getReferrerURLCookieHandler() != referrerURLCookieHandler) {
              if (tc.isDebugEnabled()) {
                  Tr.debug(tc, "Old and new CookieHandler", getReferrerURLCookieHandler(), referrerURLCookieHandler);
              }
              webAppSecurityConfigRef.set(WebAppSecurityCollaboratorImpl.getGlobalWebAppSecurityConfig());
              referrerURLCookieHandlerRef.set(referrerURLCookieHandler);
          }
      }
docs: /*
  In case, the ReferrerURLCookieHandler is dynamic in every request, then we will need to make this into
  OidcClientRequest. And do not do static.