MYLOC-86 Adding cookies module

can we also have some tests to validate that regex disallows setting those blacklisted keys?