Setting the 'rack.policy' cookie