deps: cookies@0.5.0

closes #26