requests1: correctly set cookies
If there is no replacement session cookie, don't try to save it (this happens on endpoints that don't require auth) (I don't know why this worked before (with requests0) - for responses that did have a new session cookie, they *also* had the old session cookie).  Also add a test for the documentation endpoint, which doesn't require auth.