Minor change

- Minor change to `cookie.set()` to conform to the RFC better
- `cookie.set()` now returns `undefined` to keep it client & server "friendly"