How exactly this works? If Auth0 write an HTTP-Only and cookie that third party cookie check is in JS it won’t work.