set_cookie allows omitting value