case-insensitive lookup of cookie header