Put rescue block around the handling
Don't set HTTP_COOKIE if there is no session id
Bump to 0.4.0