Now adds a `Vary: Cookie` header.