support passing browser cookies to OP/AS backchannel calls
release 1.7.1