I am trying to build a headless cms and everything is going well until i need to interact with the frontend trying to make it secure, combine with the recent incomplete move away from the crosssite cookies.