Fix default path handling
Ignore cookies with empty domain attribute-value
Only one cookie with same path, domain, and path
Keep same creation time when replacing a cookie
Enforce HTTP-only cookie rules
Evict expired cookies
Ignore invalid cookies