[4.0.0.2 backport] CBG-4965 create cookie with SameSite=None if CORS enabled

[4.0.0.2 backport] CBG-4965 create cookie with SameSite=None if CORS enabled #15977