:same-site cookie attribute not supported

[jeroenvandijk]

In newer ring-core versions a cookie can be given the attribute :same-site with values :lax, :strict, or :none. More info here.

Peridot should mimick the behaviour of (modern) browser here so it is possible to write good test scenarios for when dealing with cross-domain cookies (e.g. in an Oauth flow).