Play Framework

fix(http): emit the SameSite attribute whatever the case of the configured value

Scope.applySameSite compares application.session.sameSite without
regard to case, but the cookie encoder in PlayHandler matched Netty's
SameSite enum by exact name and skipped anything else. So "none" gave a
session cookie that was forced to Secure and carried no SameSite
attribute, and "strict" was dropped without a word, leaving the cookie
with the browser's default instead of the stricter setting asked for.

The encoder now matches the three names without regard to case. An
unknown or empty value still leaves the attribute off.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KDUoh3KhBpfjXn4rV6H356