Could this make use of ```res.cookie()```? It looks like this code came from there already.

https://github.com/visionmedia/express/blob/master/lib/response.js#L599-L607