Why do i get cors error when i do

kratos.toSession()

on web in chrome but not in firefox? Kratos uses cookie samesite lax and i don't have https in dev mode now. kratos is using

--dev

flag. Does chrome really require https for lax, i thought it was only for samesite none.

Could the CORS response be cached by the browser?

Yeah i solved it somehow, i think it was some cache annoyance in the end.