cookie work

- don't send cookies with that use wildcard domains for now
- handle cookies with implicit domains and/or no paths
last c0mmit message formatting