Added session cookie directives and corresponding rejection