Explicitly set the cookie policy, fixes #12