I'm unable to set sameSite cookie option to strict to prevent cross-site requests from sending out the cookie, an thoughts on how to add that feature? https://www.owasp.org/index.php/SameSite