fix Set-Cookie parsing