STRICT

The cookie is only exposed for same-site requests