fix: standardize session cookie sameSite attribute and ensure proxy setting for production

server/server.js

@@ -63,9 +63,10 @@ app.use(session({
     secure: process.env.NODE_ENV === 'production',
     maxAge: 24 * 60 * 60 * 1000, // 24 hours
     httpOnly: true,
-    sameSite: process.env.NODE_ENV === 'production' ? 'lax' : 'lax'
+    sameSite: 'lax'
   },
-  name: 's22poll.sid'
+  name: 's22poll.sid',
+  proxy: process.env.NODE_ENV === 'production'
 }));
 
 app.use(passport.initialize());