rewrite cookies
exclude internal cookies from external subrequests, but include them back for internal theme subrequests