Possible 5.1.3 / OP cookie regression

[Cantor, Scott]

Henri and I bottomed this out as a bug in Nimbus we have to report and probably code around for now. It's a bit convoluted, but I added what I think I understand to be the impact at the top of the OP release notes [1].

It's possible to use 5.1.3 with a workaround, but regardless of the version SameSite isn't set in various cases. The trigger is what it always seems to be, not using HTML Storage.

Bug is at [2].

Google should be shot into the sun. Just gonna close every email with that now.

-- Scott

[1] https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/2776760321/OPReleaseNotes
[2] https://shibboleth.atlassian.net/browse/JOIDC-223