This release fixes an oversight in how cookie options were copied internally, impacting SameSite cookie settings.

CHANGELOG

• [docs] Improve advice around key generation & usage. (#168) @elithrar
• Set http.Cookie's SameSite field in NewCookie for Go 1.11 or later (#170) @nwidger