NPE when empty Set-Cookie header in response, close #2361