Filter out the Orig-Cookie header if coming from clients

Change-Id: Ia3fad71253123f3813f23c6cf54a688967a257f9