API to my.su.utwente domain
The API is currently placed at api.sun.utwente.nl. This means that the cookies need to be placed at the .utwente.nl level. This leads to conflicts with crsftokens from other applications (e.g. khonsu). It should be moved to api.my.su.utwente.nl or my.su.utwente.nl/api.
The former means DNS routing to api.my.su.utwente.nl should be fixed.
The latter means that Django should append /api properly with its resources. Due to Django reasons, this will break the admin panel. At least, that was a year ago. It could be that updating Django will fix the issue.