Specify SameSite=None and Secure if the cookie should be sent in cross-site requests. This enables third-party use.