This release fixes an oversight in how cookie options were copied internally, impacting SameSite cookie settings.
CHANGELOG
- [docs] Improve advice around key generation & usage. (#168) @elithrar
- Set http.Cookie's SameSite field in NewCookie for Go 1.11 or later (#170) @nwidger