IIS Module Intermittently Failing to Query Daemon over a TCPListener for Session Information

[Nate Klingenstein]

> sameSiteSession only matters if you want to POST forms from a third party site back to the SP application and maintain the session. It applies when application logic crosses sites and forms are involved. Otherwise, you're literally opening up the application to CSRF by enabling that.

iframes are littered throughout the application.  I don't know which HTTP method they use, I'm aware of the CSRF implications, and they have been evaluated to the best of our present ability.