Add missing cookie assertion
Mark cookie disclosure feature as WIP