add cookie to response
Response is actually Request
allow passing path on cli
secure flag for cookies
stub eating cookie
use delta for cookie expiry