erp5_core: Use SameSite=Lax cookie
Following https://lab.nexedi.com/nexedi/erp5/merge_requests/976
SameSite=None breaks the compatibility with some browser versions. https://www.chromium.org/updates/same-site/incompatible-clients which is problematic for public web sites.