fixed a few more RFC 6265 compliance bugs