Adds some thread safety to the cookies strategy

The cookie accessor in the cookies strategy was not thread safe and would be clobbered in a concurrent request environment.

A simple change to peg the cookies to the local thread.