Allow instance admins to set their own SameSite cookie policy from the config. Default value in the config is `Lax`.