proxy for intercepting set-cookies