title: SagePay / Chrome 80 / 3D Secure / Samesite and lost session ID
body: <p>I have inherited an Opencart 2.0.1.1 website using SagePay Direct for payments.</p>
  
  <p>With the changes to samesite cookies in Chrome 80 transcations have been failing to call back correctly - transaction is not found. The payment goes through but it seems the session/transcation reference is lost so the order status does not get updated. I think this is because of the changes to how cookies are handled and the redirection to the 3D secure screen breaking this.</p>
  
  <p>I have updated the session cookie to be samesite=None and set it to secure but this didn’t correct the problem. Currently payments work in other browsers and, when run using a local development copy of the website and SagePay’s test service Chrome will work too.</p>
  
  <p>Has anyone else run into this problem and know of a fix?</p>
  
  <p>I don’t think updating OpenCart is a viable option as some core files have been tweaked by previous developers but I don’t know which.</p>