There was an issue where external LMS system (e.g. Canvas, Blackboard) that used Open edX LTI Provider calls had cookies blocked. This update fixes this issue by defining third-party cookies to have attributes of `Secure=True` and `SameSite=None`. Details here: https://discuss.openedx.org/t/lti-xblock-and-samesite/759/5 (cherry picked from commit 28479a2966b87b16a25dbc96c19b6f5817d255de)