fix: Use SameSite=Lax instead of SameSite=Strict
fix: Use SameSite=Lax instead of SameSite=Strict

Reference: https://web.dev/samesite-cookies-explained/

Scenario:
A user is logged in on a frappe instance. (with, say, sid=abcd)

In an OAuth like flow, a third party site, say, GitHub redirects the user to the frappe instance.

Now because SameSite=Strict is set, the browser can't send the cookies it has (sid=abcd) to the frappe server.

Once the frappe server receives this request without cookies, It assumes that this is an unauthenticated user, and sets cookies in response as sid=Guest.
Reference: https://github.com/frappe/frappe/blob/f3e14b4ac71135fae5d83bb371c665879be36600/frappe/sessions.py#L178

Once the browser receives these values in response (sid=Guest) it overwrites the existing cookie values(sid=abcd) and sets sid=Guest,

This effectively causes the user session to be terminated.

saurabh6790/frappe,adityahase/frappe,almeidapaulopt/frappe,frappe/frappe,yashodhank/frappe,almeidapaulopt/frappe,adityahase/frappe,almeidapaulopt/frappe,adityahase/frappe,StrellaGroup/frappe,StrellaGroup/frappe,yashodhank/frappe,StrellaGroup/frappe,almeidapaulopt/frappe,yashodhank/frappe,saurabh6790/frappe,mhbu50/frappe,mhbu50/frappe,mhbu50/frappe,adityahase/frappe,frappe/frappe,mhbu50/frappe,yashodhank/frappe,frappe/frappe,saurabh6790/frappe,saurabh6790/frappe