title: Why am I getting "Indicate whether to send a cookie in a cross-site request by specifying its SameSite attribute"?
body: <p>In a Chrome warning, it says:</p>
  <blockquote>
  <p>Specify SameSite=None and Secure if the cookie should be sent in cross-site requests. This enables third-party use.</p>
  </blockquote>
  <p>How do I do this correctly using <code>express-session</code>?</p>
  <pre class="lang-js prettyprint-override"><code>app.use(
    cors({
      credentials: true,
      origin: [&quot;http://localhost:3000&quot;, &quot;https://elated-jackson-28b73e.netlify.app&quot;] //Swap this with the client url 
    })
  );
  var sess = {
    secret: 'keyboard cat',
    cookie: {}
  }
  
  if (app.get('env') === 'production') {
    app.set('trust proxy', 1) // trust first proxy
    sess.cookie.secure = true // serve secure cookies
    sess.cookie.sameSite = 'none'
  }
  
  app.use(session(sess))
  </code></pre>