don't want to kill performance for a price no more than your reasonable cost of physically performing this conveying of source, or (2) access to cookies "samesite" => "Strict" // Strict SameSite policy for better