localhost is also a secure origin by browsers

[segevfiner]

Also partitioned cookies are only allowed with secure, so in secure: 'auto' also set partitioned to false

Checklist

• run npm run test && npm run benchmark --if-present
• tests and/or benchmarks are included
• documentation is changed or added
• commit message and code follows the Developer's Certification of Origin
  and the Code of conduct

[ilteoood]

hey @segevfiner , are you planning to continue on this one?

[segevfiner]

Need to merge/rebase and see if I can figure out the tests bit. I don't remember what didn't work for me with the tests when I originally tried doing this.

[Eomm]

Marking to review it

[segevfiner]

Tried to fix that tests. Seems there was an implicit assumption about localhost being insecure in some of the tests, so I tried to work around that.