Only occurs in combination with api-server enabled, due to some hot-fixing starlette does. Since we load starlette at a later point, we need to replicate starlette's behaviour for now, so sameSite cookies don't create a problem. closes #4356