This avoids samesite cookie-related issues in iOS PWAs during the authentication flow
startsWith
doesn’t work in old browsers, but I guess it’s not a problem because service workers don’t either!
startsWith
doesn’t work in old browsers, but I guess it’s not a problem because service workers don’t either!