samesite argument in `Response.set_cookie` and `cookies.make_cookie` should accept native strings

[mmerickel]

Currently it's the only text-based argument that requires bytes, the others are coerced. This argument should also accept native strings which are coerced to bytes under the hood.

Related: Pylons/pyramid#3298