Split off pass requests from cookie munging

Do cookie munging in vcl_hash, as it's only required for caching
reasons.

Change-Id: I8e1f6f88d8da83f767a052c07393d59bd1ddb0d1
Merge "Split off pass requests from cookie munging" into production