MCKIN-22396 Fix samesite cookie issue for Scorm Shell login flow

[moeez96]

Ticket: https://edx-wiki.atlassian.net/browse/MCKIN-22396

In Scorm shell login flow, the platform is loaded in an iframe from a cross origin ancestor. Hence we need the sessionid and csrftoken cookies to have samesite='None' and secure=True (after chrome update).

This has also been done for edx/edx-platform here

[xitij2000]

👍

• I tested this: matches tested upstream code for the same purpose. Checked that the samesite attribute it set correctly.
• I read through the code
• [na] I checked for accessibility issues
• [na] Includes documentation

[ihtram]

please cherry pick commits form upstream instead of adding new commits. It would make our life easier in upcoming rebases.

[ihtram]

I noticed openedx is on 0.5.1, not sure why are we on 0.6.6

[xitij2000]

@ihtram I don't see a reason to pin this to 0.5.1 just because openedx has done so.

The newer version is still compatible but has a better logic for detecting compatible/incompatible browsers. Where 0.5.1 does a rough regex match 0.6.6 has a better mechanism that could work for more browsers in a more consistent way.

In fact if it's acceptable we should update the version for upstream ironwood as well.

[moeez96]

Following edx team's request, opened another PR #1879 including cherry-picked commits from upstream, yet the same code.