Rack app to catch cookie from XSS