use new Yaws merge_header capability

To properly handle multi-value headers, especially Set-Cookie headers, use
the new Yaws yaws_api:merge_header function.