Don't send cookie unless needed

The _ERRORS cookie was always set even if Validation.Keep() wasn't
called. Now the cookie is set if Validation.Keep() is called or when a
cookie was previously set.