move support for multiple `res.cookie` calls to lib/response

Patch.js is simpler and follows upstream node.js closer as a result.