Avoid NPE when response has no Set-Cookie header