fix: prevent stale htmx cache on login potentially causing csrf issues

addresses #869dd1fch

config/packages/framework.yaml

@@ -9,9 +9,8 @@ framework:
     # Remove or comment this section to explicitly disable session support.
     session:
         handler_id: null
-        cookie_secure: auto
-        # cookie_samesite: lax
-        cookie_samesite: none # this is to make login work in staging environment. to be removed when going live!
+        cookie_secure: true
+        cookie_samesite: lax
 
     #esi: true
     #fragments: true