add back cookie package dependency

I thought cookie-parser will have cookie as a dependency