v1.0.0-next.104

• fix: routing loopholes (b6e7528)
• fix: security advisory CVE-2023-29008 (68e295f)
• fix: remove httpOnly from allowed cookie options (5315949)
• feat: hooks option to not use server-side features (4966fd6)