This PR introduces CookieSerializerCustomizer as callback that allows the customization of auto-configured DefaultCookieSerializer bean. This is particularly useful for configuring cookie serializer's capabilities that are not supported by Servlet API and therefore not exposed via server.servlet.session.cookie.* properties, such as SameSite.

The existing RememberMeServicesCookieSerializerCustomizer has also been refactored to leverage the new callback.

Comment From: wilkinsona

Thanks very much, @vpavic.