Allow specifying cookie settings on a request-by-request basis

[Lordfirespeed]

E.g. sometimes you want to temporarily use SameSite=Lax for an OAuth2 flow before upgrading back to SameSite=Strict.