http.SetCookie(context.Writer, &http.Cookie{
    Name:     "token",
    Value:    url.QueryEscape(newToken),
    MaxAge:   maxAge,
    Path:     "/",
    Domain:   "",
    SameSite: http.SameSiteNoneMode,
    Secure:   true,
    HttpOnly: true,
})