disable global cookie jar to prevent cookie sharing between different clients
encode the whole set-cookie header retrieved from the api

This prevents the cookie options form the api host are getting set on
the client cookie.