[4.0.0.2 backport] CBG-4965 create cookie with SameSite=None if CORS …

[4.0.0.2 backport] CBG-4965 create cookie with SameSite=None if CORS … #15976