Only use SameSite=None on Secure site
This fixes logging in when developing on newer versions of Chrome.