[3.3.0.2 backport] CBG-4964 create cookie with SameSite=None if CORS enabled

[3.3.0.2 backport] CBG-4964 create cookie with SameSite=None if CORS enabled #15975