only update cookies on 200 responses