Don't require Same Site Cookies on assets

Which can be used for public iframe embeeding

See https://github.com/nextcloud/calendar/issues/169



Signed-off-by: Thomas Citharel <tcit@tcit.fr>