Session cookie setting overhaul

[aleshasam]

We have a problem.

Change in same_site and http_only settings in session.php leads to different responses to authorization requests and requests to the authorized zone. This results in authorization and cookie installation errors in the browser.

I've added additional settings to the sanctum module for more accurate cookie file configuration. Backward compatibility is preserved.

[taylorotwell]

I am closing this pull request because it lacks sufficient explanation, tests, or both. It is difficult for us to merge pull requests without these things because the change may introduce breaking changes to the framework.

Feel free to re-submit your change with a thorough explanation of the feature and tests - integration tests are preferred over unit tests. Please include it's benefit to end users; the reasons it does not break any existing features; how it makes building web applications easier, etc.

Thanks!