return cookie header not set-cookie header