updating set-cookie with expires/max-age/path/domain/http-only/secure keywords