Look at current use of JavaScript managed cookies

[robotdan]

Possible issues with cookies that may break in future browser versions.

Description

We have some cookies that are not secure, and are very simply values that we drop in JavaScript.

I saw this in Firefox, perhaps we need to write out the cookie differently.

Some cookies are misusing the recommended “SameSite“ attribute 2
Cookie “fusionauth.timezone” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite

We may need to set the Secure flag based upon the schema we detect in the browser if we aren't already. We should look at fusionauth.timezone or any other cookie we may drop in JavaScript.

[robotdan]

Closing as handed under #1414