fixed broken cookies
by bypassing WebOb.response.set_cookie()
it was doing some cray m.serialize() that byte screwed the cookie
so I rolled my own manual header set ad it seems fine
experiemnt with priority_token cookie