feat: setup cookies to use same_site lax

as per firefox changes, when samesite directive isn't specified on cookie, the browser will lock them in a near future.
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite

```
Some cookies are misusing the “sameSite“ attribute, so it won’t work as expected.
Cookie “myCookie” rejected because it has the “sameSite=none” attribute but is missing the “secure” attribute.
```

Author: warlof

config/session.php

@@ -194,6 +194,6 @@
     |
     */
 
-    'same_site' => null,
+    'same_site' => 'lax',
 
 ];