It looks to me like any cookies set on the original response won't make it to the session. Am I wrong?