----------------
* Bugfix set domain when deleting auth cookie.
* Change the default SameSite from Strict to Lax.
* Change the default hashing algorithm to SHA512. This will invalidate
any existing cookies.
* Switch from setting expires to max age.
* Add a renew_login function, to renew the cookie expiry.
* Ensure cookies are deleted - by using the same samesite attribute as
configured.
* Require Quart >= 0.13