User cannot open Kibana in private browsing with cookies blocked

[bhavyarm]

Kibana version: 7.3.0 BC4

Elasticsearch version: 7.3.0 BC4

Browser version: Safari latest

Browser OS version: OS x

Original install method (e.g. download page, yum, from source, etc.): from staging

Describe the bug: If user disables cookies and website data on safari - Kibana doesn't work and displays:

Version: 7.3.0
Build: 25132
Error: The operation is insecure.
_callee$@http://localhost:5601/bundles/commons.bundle.js:3:1664751

Steps to reproduce:

1. Open safari browser -> preferences -> check the option for always block cookies and website data
2. Open kibana
3. Kibana can't run and displays

Version: 7.3.0
Build: 25132
Error: The operation is insecure.
_callee$@http://localhost:5601/bundles/commons.bundle.js:3:1664751
tryCatch@http://localhost:5601/built_assets/dlls/vendors.bundle.dll.js:541:455188
invoke@http://localhost:5601/built_assets/dlls/vendors.bundle.dll.js:541:459027
asyncGeneratorStep@http://localhost:5601/bundles/commons.bundle.js:3:1661925
_next@http://localhost:5601/bundles/commons.bundle.js:3:1662253
http://localhost:5601/bundles/commons.bundle.js:3:1662390
initializePromise@[native code]
Promise@[native code]
http://localhost:5601/bundles/commons.bundle.js:3:1662159
tryCatch@http://localhost:5601/built_assets/dlls/vendors.bundle.dll.js:541:455188
invoke@http://localhost:5601/built_assets/dlls/vendors.bundle.dll.js:541:459027
asyncGeneratorStep@http://localhost:5601/bundles/commons.bundle.js:3:1824801
_next@http://localhost:5601/bundles/commons.bundle.js:3:1825129
promiseReactionJob@[native code]

Browser logs:

[Error] SecurityError: The operation is insecure.
_callee$ — commons.bundle.js:60171:89
tryCatch — vendors.bundle.dll.js:541:455189
invoke — vendors.bundle.dll.js:541:459028
asyncGeneratorStep — commons.bundle.js:60060
_next — commons.bundle.js:60079
(anonymous function) — commons.bundle.js:60084
initializePromise
Promise
(anonymous function) — commons.bundle.js:60076
tryCatch — vendors.bundle.dll.js:541:455189
invoke — vendors.bundle.dll.js:541:459028
asyncGeneratorStep — commons.bundle.js:66322
_next — commons.bundle.js:66341
promiseReactionJob

	add (commons.bundle.js:3:1734929)
	_callee2$ (commons.bundle.js:3:1832017)
	tryCatch (vendors.bundle.dll.js:541:455189)
	invoke (vendors.bundle.dll.js:541:459028)
	asyncGeneratorStep (commons.bundle.js:3:1824802)
	_throw (commons.bundle.js:3:1825216)
	promiseReactionJob
[Error] Unhandled Promise Rejection: SecurityError: The operation is insecure.

Screenshots (if relevant):

[elasticmachine]

Pinging @elastic/kibana-operations

[jbudz]

👍 we can probably do a check + message to make sure cookies are enabled

[elasticmachine]

Pinging @elastic/kibana-security (Team:Security)

[legrego]

Closing in favor of #121189