fix bug: miss 2 break statement in set cookie function