Embedding in other websites does not allow to log in with pseudonym

When embedding a player capsule in another website our cookie is not accepted by browser because it does not specify `SameSite=None; Secure` and so it is treated as `SameSite=Lax` which means it is accepted only if the origin is the page origin.

If we want to support seamless integration inside other websites we should relax the cookie same site policy.

We could only relax the cookie policy for pseudo logins and instead ask users to access the platform as a standalone website when they want to log in with a "real" account.