[http] handle lack of cookie