flatten() stringifies the Set-Cookie header by default