Merge pull request #9600 from metabase/http-only-cookies-2

frontend/src/metabase/auth/auth.js

frontend/src/metabase/lib/cookies.js

frontend/src/metabase/setup/actions.js

frontend/test/legacy-selenium/auth/login.spec.js

src/metabase/api/session.clj

src/metabase/api/setup.clj

src/metabase/api/user.clj

src/metabase/middleware/session.clj

test/expectation_options.clj

test/metabase/api/session_test.clj

test/metabase/http_client.clj

test/metabase/test/data/users.clj

test/metabase/test/util.clj

test/metabase/test_setup.clj

test/metabase/util_test.clj