cookie.samesite = Lax

cookie.samesite = Strict

[workaround] cookie.samesite = Strict but via meta refresh