Use WebResponse::setcookie()

Since core change Ia0c424a4 made WebResponse::setcookie more flexible,
we should use it here.

Depends-On: Ia0c424a48d9455a8574d91631cde0f00c9882288
Change-Id: I2f422ee83752d45433985d4535eed412a5b0c7e3