Cookie sanitization

Looking good, with @devgeeks addition, in the test, of this.server.response().