allow cookie header to be set (without cookie containers)