What do you get when you combine an API, SameSite=None, and a Session cookie? https://securinglaravel.com/in-depth-three-reasonable-decisions-one-critical-vulnerability/ #Laravel