find out correct protocol to set a cookie