cookie header rewriter needed to handle nulls